last executing test programs: 1.742341822s ago: executing program 2 (id=778): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) inotify_init1(0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_get$pid(0x3, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sysinfo(0x0) 1.737789292s ago: executing program 3 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000024232ffe164cbb3ca324eaed713fb7558ad268062472c4f74766f41bf13f516be31506863d5b82d1df5e714595fc2ae23070a410000000ca91fcacd2ecf90abb3f7e2f888aa206ab902ac2017d927ea3763997912c9498f4e7a958522e57a7ca29738f6c63c137daee06424ae1be61"], 0x48) fadvise64(r2, 0x8000000000000000, 0x100000001, 0x1) 1.704712142s ago: executing program 3 (id=780): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000433000/0x2000)=nil, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400e58bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000100627269646765000014000280060009000180000005002d00"/44], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x10) acct(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet(r6, &(0x7f0000000340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000121c0)="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", 0x1000}, {&(0x7f00000004c0)="de2823a441a812f2a440e9c8988860326df93f74b7e4ef86772d437ebf129b8d43d44923003d6c25e6e43b63f7d1637e6cc82acfe065acb34aa9cb9a157fc38ec3ca890dc2aca4ec4f9d58feb34f7d26", 0x50}, {&(0x7f0000000540)="b79653ad5edfc41a77edd0e7094ff26f178e06592661222e798feaf3b41f7f8797f75a765a9ca15178ac364d4105cb84b804ff81ce1d0ccf75aaba8b9e0254135f2bbafde120608a19cdb82295b76511f0f45b32c3fd29bb5af4e7a010f169929200336720ae797823606fb589b0a57ee745cf2f06ef679ab479f6717ed2fdad969aabf9230d5dc72bca5f", 0x8b}, {&(0x7f0000000600)="7d6f7552bf91b15bb4d7694ed90a14b33f55a1771df28b995b47615afd6d5caa0a42bf595e2c4cccd5dc38d8f47c52abd10be7908b72722964da39b45589aa639af761cff4362ea5b8813c69b3ca8d36db31fc7e9dd352958c7ddbf0da8a80d7c69aa1919ded46dc6f436d2bbf13c963d4903f96490a1196c2211be6b7821343914c53f6bc47c57309ff40e41d4d136f515444b94144d1cf1a833f0582e82b5624531a50cf06", 0xa6}], 0x4}}], 0x1, 0x190) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r7, 0x0, 0x1000}, 0x18) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) 1.704395173s ago: executing program 2 (id=781): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2040) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) readv(r0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)=""/32, 0x20}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000000}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x81000, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f8040000", @ANYRES16=r4, @ANYBLOB="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"], 0x4f8}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c804) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="1f000000190081054e81f782db4cb9040263cb848a0ef30b1bffff070a000a", 0x1f}], 0x1}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r8 = fsopen(&(0x7f0000000280)='dax\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_driver={0x1, 0x3, &(0x7f00000000c0)="eb77ec06c0e0af95d3be025b910dba5be03a7e6e323742e5686b5dbf7e9374afcb6ea65cc8a37f6d64b039596680adf8b02e98fa806666f8ecd3e88e64234f564ef131829083860a165524cf7639b3459ebcad8584d7864c"}) 1.311568649s ago: executing program 1 (id=791): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) inotify_init1(0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_get$pid(0x3, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sysinfo(0x0) 1.310689849s ago: executing program 3 (id=792): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.285172799s ago: executing program 1 (id=793): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, 0x0, 0x44800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000240), 0x4) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x14f) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00'}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001"], 0xfe44, 0x0) sendmmsg$inet6(r0, &(0x7f0000006880)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000002100)=""/4127, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) eventfd2(0x9, 0x100001) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 1.26075039s ago: executing program 3 (id=794): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private=0xa010101, @in=@multicast2, 0x0, 0x0, 0x0, 0xfffc, 0xa, 0x0, 0x0, 0x11}, {0x0, 0x4, 0x0, 0x80000000, 0x6, 0x5, 0x0, 0x40000000000000}, {0x8000000000000000, 0x9, 0x53e5, 0x6}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@multicast1, 0x1502, 0x4, 0x0, 0x0, 0x4, 0xfffffffd, 0x1}}, 0xe8) r1 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x2008, 0x800, 0x0, 0x126}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5430000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x492, &(0x7f0000001500)="$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") syz_io_uring_setup(0x7b0c, &(0x7f00000000c0)={0x0, 0x1d7, 0x2000, 0x3, 0x2d3, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000180)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) 1.24024582s ago: executing program 1 (id=796): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000300"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4004, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@oldalloc}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@nodelalloc}]}, 0xff, 0x464, &(0x7f00000004c0)="$eJzs3MtvG8UfAPCv13H6/iW/Uh4tLQQKouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCgqHckSVuCOOSPwFXCgXBJyQuMIJDgipQr1QOBmtves6je3EtROH+vOR1p3xjDvz3d1pZ2fXDmBgjaUvhYjtEfFzRIzUsksrjNX+uHnj0szfNy7NFKJSee3PQrXeXzcuzeRV889tq2UqlTbtXnkzYrpcnjuf5ScWz74zsXDh4jOnz06fmjs1d27q2LHDh/YNH5060mWExerrjrSve96f37v7pTeuvjJz4upb33+Z9nd7Vqsxjl4Zq+3dph7vdWN9tqMhXRjqY0foSDo60sNVqo7/kSjGlnrZSLz4UV87B6ypSiWpbGpdfLkC3MXSiTowiPL/6NPr33xbp6nHhnD9eNTXMW5mW61kKJKsTim7RloLYxFx4vI/n6VbLF2HSNaoSQBgwF07HhFPN5v/JXFfQ73/ZfeGRiPi/xGxMyLuiYhdEXFvRLXu/RHxQIft336HZPn8szJyR4GtUjr/ey67t7V0/leffo0Ws9yOavylwsnT5bmD2T45EKVNaX6yTRvfvPDTJ63KGud/6Za2n88Fs378MbRkga5x1t696x9G7BlqFn+hPudN58e7I2JPq7/k1/ZtnH7yi72tylaOv40eTMorn0c8UTv+l+O2+HOFlvcnJ589OnVkYnOU5w5O5GfFcj/8eOXVVu13FX8PXL9Wia1Nz/96/KOFzRELFy6eqd6vXei8jSu/fNzymrLz8z9idnpxerjwejU9nL333vTi4vnJiOHCy8vfn7r12Tyf10/P/wP7m4//nXFrTzwYEelJvC8iHoqIh7O+PxIRj0bE/jbxf/f8Y293Hn+bVfkeSuOfXen4R+Px7zxRPPPtV53Hn0uP/+Fq6kD2Tnr8V4prtR3sZt8BAADAf0VSfQa+kIzX00kyPl57hn9XbE3K8wuLT52cf/fcbO1Z+dEoJflK10jDeuhktjac56duyx/K1o0/LW6p5sdn5suz/Q4eBty2FuM/9Xux370D1pzva8HgMv5hcBn/MLjS8f/bsX73AuiDtX3CGtjQms3/P+hDP4D1t8L1/5b16gew/qz/weAy/mFwGf8wkFp+Nz7p6iv/En1KfD3c3W81rD4RyQYJ+a5JlKJp0dCqf8ziDhObmhb1+18mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//4KU6IQ=") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) munlockall() sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/190, 0xbe}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/173, 0xad}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000440)=""/32, 0x20}, {&(0x7f0000000480)=""/81, 0x51}], 0x7, &(0x7f0000000580)=""/235, 0xeb}, 0xc}, {{&(0x7f0000000680)=@caif=@util, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/56, 0x38}], 0x1}, 0x4}], 0x2, 0x0, &(0x7f0000000840)={r1, r2+60000000}) 1.147660822s ago: executing program 4 (id=798): mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540), 0x8000, &(0x7f0000001e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9ff9a841e2eb21486e05ddee41240bc9d3ce3a9a5915be607c5cce0385d1db5d73fe4794696bea5234b5b7209ef99689157147ba0bea60c07affcc3d2706527418b3fbc67dbee9e29d93b4938d36a0e3f01c52cbea346f00e6bf6acce5d8e8eedf69af14bdb88bb7d2d40847bce82093fa40b6ed5f9ee97fdb7265d5342696d18c05b0278e21f98bb64d111424f71bdb84800a55ded9cbfb81313876006e513a28834022aed2e5e1784d02202fc9bca90c3c2552ae9b25346c12942e758c68ba6b3513fed39552171f78882a", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,noextend,obj_user=,mask=^MAY_WRITE,audit,obj_role=geneve0\x00,rw,obj_type=&[],smackfshat=ceph\x00,\x00']) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f1e1ca456a2a2eaf300"/37], 0x50) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 843.231906ms ago: executing program 4 (id=799): mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540), 0x8000, &(0x7f0000001e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9ff9a841e2eb21486e05ddee41240bc9d3ce3a9a5915be607c5cce0385d1db5d73fe4794696bea5234b5b7209ef99689157147ba0bea60c07affcc3d2706527418b3fbc67dbee9e29d93b4938d36a0e3f01c52cbea346f00e6bf6acce5d8e8eedf69af14bdb88bb7d2d40847bce82093fa40b6ed5f9ee97fdb7265d5342696d18c05b0278e21f98bb64d111424f71bdb84800a55ded9cbfb81313876006e513a28834022aed2e5e1784d02202fc9bca90c3c2552ae9b25346c12942e758c68ba6b3513fed39552171f78882a", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,noextend,obj_user=,mask=^MAY_WRITE,audit,obj_role=geneve0\x00,rw,obj_type=&[],smackfshat=ceph\x00,\x00']) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44010}, 0x44000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f1e1ca456a2a2eaf300"/37], 0x50) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 795.649797ms ago: executing program 2 (id=800): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 701.577129ms ago: executing program 2 (id=801): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 605.83481ms ago: executing program 2 (id=803): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x1d6}, 0x18) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 583.010301ms ago: executing program 4 (id=804): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x2, &(0x7f0000000000)={0x4000051, 0xfffffffa}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00007d7000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) inotify_init1(0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioprio_get$pid(0x3, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sysinfo(0x0) 541.622781ms ago: executing program 1 (id=805): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000049eb40dd5685b7ea3c53208f8d00000000"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x1de, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa2234c2"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) epoll_create1(0x80000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x1ff, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)) eventfd2(0x52, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000400), &(0x7f0000000500)=r5}, 0x20) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@access_uid}]}}) 541.358801ms ago: executing program 2 (id=806): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 541.187471ms ago: executing program 0 (id=807): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000700000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 540.509841ms ago: executing program 4 (id=808): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r1, r1) 515.946491ms ago: executing program 0 (id=809): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) 515.616111ms ago: executing program 0 (id=810): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 515.181562ms ago: executing program 4 (id=811): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 495.817772ms ago: executing program 0 (id=812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0, 0x700}, {&(0x7f0000000200)="97ff70f871", 0x5}], 0x2}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2f, 0x5, 0xc, 0x3575, 0x2, 0x4a3, 0x6}}, {0x4}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 452.741773ms ago: executing program 4 (id=813): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000180)=ANY=[@ANYBLOB="00898afa94b7795766bd1671e3f75d28873bf49da412555d594b01f9f4ac5635c31999e549f5f8c4e69173d8d3094f54de6d7c7dd9063e1cabc20552041d17c8451ef6988071b125470a96f5dbc648004543642400ad15e70a084ea931b67d64"], 0x1, 0x378, &(0x7f0000000880)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r4, &(0x7f00000000c0)=""/50, 0x32) getdents64(r4, &(0x7f0000000f80)=""/4087, 0xbdf) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/4089, 0xff9}, {&(0x7f0000001700)=""/4082, 0xff2}, {0x0}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40000005}], 0x3, 0x40000000, 0x0) 388.093794ms ago: executing program 0 (id=814): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 362.536754ms ago: executing program 1 (id=815): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 342.979605ms ago: executing program 1 (id=816): unshare(0x22020400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r0}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000a12000/0x2000)=nil, 0x2000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$eJzs3U1rXNUbAPDn3mb+k38bTQQVX0AqihVLJ01sKV1ZF6KbYqDgNg3JJMRMemNmpjahi3TlVkRRcKPfwY0rxbUfwK+gIFrioq5G7rykbTrTjnWSgczvB3fmOefO8JwzE84DOcO9AYysk/lDGvF8RMwlEZPt/iQiCs1oLOJS63W7t28u5kcSjcaVP5IYb/fFPe/JnYiInYh4LiJ+KkScTh/MW93aXluoVMqb7fZ0bX1jurq1fWZ1fWGlvFK+dvHcudlzF85fvDi4ub7x/gfPls6/M/H93PL8qZlfv0viUky0z907j0FqfSaF/CO8z7sHkWyIkmEPgMcyFhHH2s/PxGQca0YAwFHWKEY0AIARk6j/ADBiOv8H6OztHdQ+WC+/vx0R493yj7X3zMab+5DHd5P7diaSiJg6zIFyJO3cioirUycf/PtLHtiz/bfODmKAHKgf8/XnUrf1J91bf6LL+jPe+e3Ef9R7/bub/1iP9W+uzxzvvVjPeua/FfHCWLf8yV7+pEf+q33m/+HO0t+9zjW+jXita/1J7svV+/ch08urlfLZ1mP3HCfrNz982PyP98i/84j5b/Q5/4nPXv555yH5X3/l4d9/t/x5Tfy0z/yfFN76ote5PP9Sj/k/6vv/ps/8F176aLvPlwIAAAAAAAAAAAAAAAAAAAAAAAAAAMCRkEbERCRpaS9O01KpdQ/vp+N4WsmqtdPLWf3aUjTvlT0VhbRzqeXJVjvJ2zPt6/F32rPNeHev/WZEPBURnxf/32yXFrPK0rAnDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtJ/bd//+vYuv+/wDAETc+7AEAAIdO/QeA0aP+A8DoUf8BYPSo/wAwetR/ABg9j1H/iwcxDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGxtzly/nR2L19czFvL13fqq9l188slatrpfX6Ymkx29worWTZSqVcWszW978/2deuZNnG7GzUb0zXytXadHVre349q1+rza+uL6yU58uFQ5sZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRvonkkaSki0macpqVSxBMRMRWFZHm1Uj4bEU9GxC/FQjFvzwx70AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYNWt7bWFSqW8KRAIBHvBsFcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHx3b/o97JEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDClvyURkR+nJl+d2H/2f8mdYvM5Ij7++sqXNxZqtc2ZvP/Pvf7aV+3+2WGMHwB4lE6d7tRxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOimurW9tlCplDdbwZ1Gy92eAQTDniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPzTwAAAP//qZ/URQ==") 327.890715ms ago: executing program 3 (id=817): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffa}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffa}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) flistxattr(r2, 0x0, 0x0) (async) flistxattr(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000380)=ANY=[@ANYBLOB="7472616efc0766a38986a8b4fcee4503642c9fa466646e4f3d006f1207d01d0adc7fc2a1aa3ad42baaa695212e915c38adff049bbf68669532a75e515a176dc5a2bfe8e34f9d3d38ff2f90dbe024fbb4ba233b91e29f0c46e49d7fe233e9724ebd2ed958a01c12f938", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',uname=&,k']) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bdf00000000010150000000b0014006372186d00000000080001001e"], 0x28}, 0x1, 0x200000000000000, 0x0, 0x22008c05}, 0x10) 317.013735ms ago: executing program 0 (id=818): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x841) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8001, 0x0, 0x9}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000006380), 0x1, 0x0) pwritev2(r8, &(0x7f0000006580)=[{&(0x7f00000063c0)="b2bc0a09961982608b3bc6ad", 0xc}], 0x1, 0x4, 0x80000001, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000108000000d300fc3fbf47da668c97c316f0ae2225000000000000ba4c895b650544760a4297827be4892aeb337e2c5b60d63ece307e3a584f0c5f27a981bb60b3441e94b12f711264a1de4b0aa4de8eaf92f0a8849f032e164387c3bae52ed87257", @ANYRES32=0x0, @ANYBLOB="208000000010010014002b8008000100", @ANYRES32=r6, @ANYBLOB="080003000800000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 0s ago: executing program 3 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c0) kernel console output (not intermixed with test programs): et [1, 0] type 2 family 0 port 6081 - 0 [ 43.865347][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.891691][ T3979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3979 comm=syz.2.160 [ 43.904182][ T3979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3979 comm=syz.2.160 [ 43.917980][ T3980] loop0: detected capacity change from 0 to 2048 [ 43.918594][ T3979] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 43.937125][ T3980] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 43.964468][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.973113][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.982219][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.997642][ T3980] EXT4-fs error (device loop0): ext4_find_extent:903: inode #2: comm syz.0.159: inode has invalid extent depth: 6 [ 44.034044][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.191106][ T3982] loop2: detected capacity change from 0 to 1764 [ 44.258145][ T3982] loop2: detected capacity change from 0 to 128 [ 44.304045][ T3982] bio_check_eod: 30 callbacks suppressed [ 44.304060][ T3982] syz.2.161: attempt to access beyond end of device [ 44.304060][ T3982] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 44.339579][ T3982] syz.2.161: attempt to access beyond end of device [ 44.339579][ T3982] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 44.356799][ T3982] syz.2.161: attempt to access beyond end of device [ 44.356799][ T3982] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 44.370775][ T3982] buffer_io_error: 26 callbacks suppressed [ 44.370788][ T3982] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 44.386454][ T3982] syz.2.161: attempt to access beyond end of device [ 44.386454][ T3982] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 44.399819][ T3982] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 44.410156][ T3982] syz.2.161: attempt to access beyond end of device [ 44.410156][ T3982] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 44.423621][ T3982] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 44.441301][ T3982] syz.2.161: attempt to access beyond end of device [ 44.441301][ T3982] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 44.454753][ T3982] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 44.508375][ T3982] syz.2.161: attempt to access beyond end of device [ 44.508375][ T3982] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 44.521972][ T3982] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 44.535645][ T3982] syz.2.161: attempt to access beyond end of device [ 44.535645][ T3982] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 44.549120][ T3982] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 44.564885][ T3982] syz.2.161: attempt to access beyond end of device [ 44.564885][ T3982] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 44.578309][ T3982] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 44.587191][ T3982] syz.2.161: attempt to access beyond end of device [ 44.587191][ T3982] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 44.600730][ T3982] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 44.612419][ T4017] FAULT_INJECTION: forcing a failure. [ 44.612419][ T4017] name failslab, interval 1, probability 0, space 0, times 0 [ 44.613260][ T4013] unsupported nla_type 52263 [ 44.625107][ T4017] CPU: 0 UID: 0 PID: 4017 Comm: syz.0.173 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 44.625138][ T4017] Tainted: [W]=WARN [ 44.625144][ T4017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.625155][ T4017] Call Trace: [ 44.625161][ T4017] [ 44.625168][ T4017] __dump_stack+0x1d/0x30 [ 44.625185][ T4017] dump_stack_lvl+0xe8/0x140 [ 44.625202][ T4017] dump_stack+0x15/0x1b [ 44.625218][ T4017] should_fail_ex+0x265/0x280 [ 44.625245][ T4017] should_failslab+0x8c/0xb0 [ 44.625265][ T4017] kmem_cache_alloc_noprof+0x50/0x310 [ 44.625287][ T4017] ? vm_area_alloc+0x2c/0xb0 [ 44.625312][ T4017] vm_area_alloc+0x2c/0xb0 [ 44.625335][ T4017] mmap_region+0xa43/0x1580 [ 44.625374][ T4017] do_mmap+0x9b3/0xbe0 [ 44.625403][ T4017] vm_mmap_pgoff+0x17a/0x2e0 [ 44.625428][ T4017] ksys_mmap_pgoff+0xc2/0x310 [ 44.625453][ T4017] ? __x64_sys_mmap+0x49/0x70 [ 44.625473][ T4017] x64_sys_call+0x1602/0x2fb0 [ 44.625492][ T4017] do_syscall_64+0xd2/0x200 [ 44.625520][ T4017] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.625543][ T4017] ? clear_bhb_loop+0x40/0x90 [ 44.625562][ T4017] ? clear_bhb_loop+0x40/0x90 [ 44.625581][ T4017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.625600][ T4017] RIP: 0033:0x7f4d6147e963 [ 44.625615][ T4017] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 44.625630][ T4017] RSP: 002b:00007f4d5fae6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 44.625648][ T4017] RAX: ffffffffffffffda RBX: 0000000000000551 RCX: 00007f4d6147e963 [ 44.625660][ T4017] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 44.625670][ T4017] RBP: 0000200000000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 44.625681][ T4017] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 44.625693][ T4017] R13: 00007f4d5fae6ef0 R14: 00007f4d5fae6eb0 R15: 0000200000000380 [ 44.625710][ T4017] [ 44.633745][ T3982] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 44.756421][ T4021] bridge_slave_0: left allmulticast mode [ 44.758858][ T3982] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 44.778368][ T4021] bridge_slave_0: left promiscuous mode [ 44.858619][ T4021] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.874059][ T4021] bridge_slave_1: left allmulticast mode [ 44.879775][ T4021] bridge_slave_1: left promiscuous mode [ 44.885763][ T4021] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.904817][ T4021] bond0: (slave bond_slave_0): Releasing backup interface [ 44.925834][ T4021] bond0: (slave bond_slave_1): Releasing backup interface [ 44.954771][ T4021] team0: Port device team_slave_0 removed [ 44.994253][ T4021] team0: Port device team_slave_1 removed [ 45.006934][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.014524][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.032151][ T4021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.039605][ T4021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.075035][ T4033] __nla_validate_parse: 6 callbacks suppressed [ 45.075049][ T4033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 45.143045][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 45.171543][ T4038] loop0: detected capacity change from 0 to 2048 [ 45.191605][ T4038] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 45.227333][ T4043] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.252677][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.261567][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.270339][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.279270][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.288092][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.313155][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.326578][ T4038] EXT4-fs error (device loop0): ext4_find_extent:903: inode #2: comm syz.0.179: inode has invalid extent depth: 6 [ 45.349766][ T4043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.358761][ T4043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.181'. [ 45.511472][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.531007][ T4056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.548053][ T4056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.558181][ T4056] bond0 (unregistering): Released all slaves [ 45.610205][ T4062] loop0: detected capacity change from 0 to 512 [ 45.618639][ T4062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c118, mo2=0002] [ 45.626736][ T4062] System zones: 1-12 [ 45.631097][ T4062] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 3: comm syz.0.185: lblock 0 mapped to illegal pblock 3 (length 1) [ 45.646201][ T4062] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.185: error -117 reading directory block [ 45.659012][ T4062] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 45.667583][ T4062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.682680][ T4062] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #2: comm syz.0.185: corrupted xattr block 255: invalid header [ 45.696859][ T4062] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 45.706948][ T4062] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.863740][ T4070] batman_adv: batadv0: Adding interface: gretap1 [ 45.870245][ T4070] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.915913][ T4070] batman_adv: batadv0: Interface activated: gretap1 [ 46.053342][ T4086] FAULT_INJECTION: forcing a failure. [ 46.053342][ T4086] name failslab, interval 1, probability 0, space 0, times 0 [ 46.066088][ T4086] CPU: 1 UID: 0 PID: 4086 Comm: syz.2.198 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 46.066115][ T4086] Tainted: [W]=WARN [ 46.066121][ T4086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.066130][ T4086] Call Trace: [ 46.066137][ T4086] [ 46.066144][ T4086] __dump_stack+0x1d/0x30 [ 46.066231][ T4086] dump_stack_lvl+0xe8/0x140 [ 46.066247][ T4086] dump_stack+0x15/0x1b [ 46.066261][ T4086] should_fail_ex+0x265/0x280 [ 46.066287][ T4086] should_failslab+0x8c/0xb0 [ 46.066351][ T4086] kmem_cache_alloc_noprof+0x50/0x310 [ 46.066374][ T4086] ? skb_clone+0x151/0x1f0 [ 46.066466][ T4086] skb_clone+0x151/0x1f0 [ 46.066491][ T4086] __netlink_deliver_tap+0x2c9/0x500 [ 46.066519][ T4086] netlink_sendskb+0x126/0x150 [ 46.066612][ T4086] netlink_unicast+0x28a/0x670 [ 46.066637][ T4086] netlink_ack+0x4c8/0x500 [ 46.066724][ T4086] netlink_rcv_skb+0x192/0x220 [ 46.066753][ T4086] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 46.066779][ T4086] rtnetlink_rcv+0x1c/0x30 [ 46.066798][ T4086] netlink_unicast+0x59e/0x670 [ 46.066859][ T4086] netlink_sendmsg+0x58b/0x6b0 [ 46.066891][ T4086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.066975][ T4086] __sock_sendmsg+0x142/0x180 [ 46.066994][ T4086] ____sys_sendmsg+0x31e/0x4e0 [ 46.067039][ T4086] ___sys_sendmsg+0x17b/0x1d0 [ 46.067079][ T4086] __x64_sys_sendmsg+0xd4/0x160 [ 46.067111][ T4086] x64_sys_call+0x2999/0x2fb0 [ 46.067148][ T4086] do_syscall_64+0xd2/0x200 [ 46.067173][ T4086] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.067197][ T4086] ? clear_bhb_loop+0x40/0x90 [ 46.067216][ T4086] ? clear_bhb_loop+0x40/0x90 [ 46.067261][ T4086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.067281][ T4086] RIP: 0033:0x7fb5b191e929 [ 46.067295][ T4086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.067310][ T4086] RSP: 002b:00007fb5aff87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.067410][ T4086] RAX: ffffffffffffffda RBX: 00007fb5b1b45fa0 RCX: 00007fb5b191e929 [ 46.067421][ T4086] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 46.067433][ T4086] RBP: 00007fb5aff87090 R08: 0000000000000000 R09: 0000000000000000 [ 46.067445][ T4086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.067453][ T4088] loop3: detected capacity change from 0 to 2048 [ 46.067457][ T4086] R13: 0000000000000000 R14: 00007fb5b1b45fa0 R15: 00007ffda3d33d78 [ 46.067476][ T4086] [ 46.069096][ T4094] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.258165][ T4102] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 46.384208][ T4088] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 46.433785][ T4088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.453073][ T4110] FAULT_INJECTION: forcing a failure. [ 46.453073][ T4110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.466372][ T4110] CPU: 0 UID: 0 PID: 4110 Comm: syz.4.203 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 46.466455][ T4110] Tainted: [W]=WARN [ 46.466461][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.466473][ T4110] Call Trace: [ 46.466480][ T4110] [ 46.466488][ T4110] __dump_stack+0x1d/0x30 [ 46.466575][ T4110] dump_stack_lvl+0xe8/0x140 [ 46.466595][ T4110] dump_stack+0x15/0x1b [ 46.466618][ T4110] should_fail_ex+0x265/0x280 [ 46.466643][ T4110] should_fail+0xb/0x20 [ 46.466682][ T4110] should_fail_usercopy+0x1a/0x20 [ 46.466711][ T4110] strncpy_from_user+0x25/0x230 [ 46.466737][ T4110] path_setxattrat+0xeb/0x310 [ 46.466767][ T4110] __x64_sys_lsetxattr+0x71/0x90 [ 46.466816][ T4110] x64_sys_call+0x1e36/0x2fb0 [ 46.466837][ T4110] do_syscall_64+0xd2/0x200 [ 46.466926][ T4110] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.466947][ T4110] ? clear_bhb_loop+0x40/0x90 [ 46.466964][ T4110] ? clear_bhb_loop+0x40/0x90 [ 46.466996][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.467090][ T4110] RIP: 0033:0x7f3c1480e929 [ 46.467105][ T4110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.467119][ T4110] RSP: 002b:00007f3c12e77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 46.467134][ T4110] RAX: ffffffffffffffda RBX: 00007f3c14a35fa0 RCX: 00007f3c1480e929 [ 46.467145][ T4110] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000000000000000 [ 46.467155][ T4110] RBP: 00007f3c12e77090 R08: 0000000000000001 R09: 0000000000000000 [ 46.467165][ T4110] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 46.467184][ T4110] R13: 0000000000000001 R14: 00007f3c14a35fa0 R15: 00007fff76b73ee8 [ 46.467202][ T4110] [ 46.659124][ T4081] EXT4-fs error (device loop3): ext4_find_extent:903: inode #2: comm syz.3.195: inode has invalid extent depth: 6 [ 46.685715][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.773268][ T4119] netlink: 'syz.4.208': attribute type 8 has an invalid length. [ 46.894846][ T4133] netlink: 'syz.4.214': attribute type 13 has an invalid length. [ 46.913056][ T4134] netlink: 'syz.3.211': attribute type 9 has an invalid length. [ 46.929135][ T4133] gretap0: refused to change device tx_queue_len [ 46.935574][ T4133] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 47.002239][ T4141] loop0: detected capacity change from 0 to 2048 [ 47.023882][ T4141] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 47.036340][ T4145] loop4: detected capacity change from 0 to 256 [ 47.052639][ T4145] FAT-fs (loop4): Directory bread(block 64) failed [ 47.065987][ T4145] FAT-fs (loop4): Directory bread(block 65) failed [ 47.078436][ T4145] FAT-fs (loop4): Directory bread(block 66) failed [ 47.078877][ T4141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.085126][ T4145] FAT-fs (loop4): Directory bread(block 67) failed [ 47.106884][ T4145] FAT-fs (loop4): Directory bread(block 68) failed [ 47.114125][ T4145] FAT-fs (loop4): Directory bread(block 69) failed [ 47.121494][ T4145] FAT-fs (loop4): Directory bread(block 70) failed [ 47.128063][ T29] kauditd_printk_skb: 2229 callbacks suppressed [ 47.128075][ T29] audit: type=1326 audit(2000000011.419:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.152745][ T4141] EXT4-fs error (device loop0): ext4_find_extent:903: inode #2: comm syz.0.215: inode has invalid extent depth: 6 [ 47.157789][ T29] audit: type=1326 audit(2000000011.419:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.193177][ T29] audit: type=1326 audit(2000000011.419:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.1.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.200759][ T4145] FAT-fs (loop4): Directory bread(block 71) failed [ 47.232111][ T29] audit: type=1326 audit(2000000011.529:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.257331][ T4145] FAT-fs (loop4): Directory bread(block 72) failed [ 47.265557][ T4145] FAT-fs (loop4): Directory bread(block 73) failed [ 47.285868][ T29] audit: type=1326 audit(2000000011.529:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.309227][ T29] audit: type=1326 audit(2000000011.529:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.332698][ T29] audit: type=1326 audit(2000000011.529:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.356203][ T29] audit: type=1326 audit(2000000011.529:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.375421][ T4159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.379695][ T29] audit: type=1326 audit(2000000011.529:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.390825][ T4159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.411127][ T29] audit: type=1326 audit(2000000011.529:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4155 comm="syz.1.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 47.487123][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.595800][ T4170] can0: slcan on ttyS3. [ 47.615910][ T4170] loop0: detected capacity change from 0 to 128 [ 47.700505][ T4169] can0 (unregistered): slcan off ttyS3. [ 47.745891][ T4158] loop1: detected capacity change from 0 to 1764 [ 47.762668][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.793728][ T4158] loop1: detected capacity change from 0 to 128 [ 47.808191][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.853114][ T4199] loop3: detected capacity change from 0 to 512 [ 47.872562][ T4199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.895324][ T4199] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.951846][ T4199] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.234: corrupted inode contents [ 47.971689][ T4199] EXT4-fs (loop3): Remounting filesystem read-only [ 47.978314][ T4199] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 48.015610][ T4223] FAULT_INJECTION: forcing a failure. [ 48.015610][ T4223] name failslab, interval 1, probability 0, space 0, times 0 [ 48.028322][ T4223] CPU: 0 UID: 0 PID: 4223 Comm: syz.0.238 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 48.028352][ T4223] Tainted: [W]=WARN [ 48.028359][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.028371][ T4223] Call Trace: [ 48.028378][ T4223] [ 48.028384][ T4223] __dump_stack+0x1d/0x30 [ 48.028447][ T4223] dump_stack_lvl+0xe8/0x140 [ 48.028470][ T4223] dump_stack+0x15/0x1b [ 48.028487][ T4223] should_fail_ex+0x265/0x280 [ 48.028516][ T4223] should_failslab+0x8c/0xb0 [ 48.028536][ T4223] __kmalloc_cache_node_noprof+0x54/0x320 [ 48.028593][ T4223] ? __get_vm_area_node+0x106/0x1d0 [ 48.028619][ T4223] __get_vm_area_node+0x106/0x1d0 [ 48.028647][ T4223] __vmalloc_node_range_noprof+0x273/0xe00 [ 48.028675][ T4223] ? n_tty_open+0x1b/0xf0 [ 48.028724][ T4223] ? klist_dec_and_del+0xba/0x270 [ 48.028745][ T4223] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 48.028767][ T4223] ? _raw_spin_unlock+0x26/0x50 [ 48.028789][ T4223] ? n_tty_open+0x1b/0xf0 [ 48.028881][ T4223] vzalloc_noprof+0x82/0xc0 [ 48.028908][ T4223] ? n_tty_open+0x1b/0xf0 [ 48.028926][ T4223] n_tty_open+0x1b/0xf0 [ 48.028942][ T4223] tty_ldisc_setup+0x83/0x220 [ 48.029007][ T4223] tty_init_dev+0x183/0x330 [ 48.029032][ T4223] tty_open+0x6cc/0xaf0 [ 48.029050][ T4223] chrdev_open+0x2eb/0x3a0 [ 48.029122][ T4223] do_dentry_open+0x646/0xa20 [ 48.029144][ T4223] ? __pfx_chrdev_open+0x10/0x10 [ 48.029164][ T4223] vfs_open+0x37/0x1e0 [ 48.029183][ T4223] path_openat+0x1c5e/0x2170 [ 48.029214][ T4223] do_filp_open+0x109/0x230 [ 48.029301][ T4223] do_sys_openat2+0xa6/0x110 [ 48.029343][ T4223] __x64_sys_openat+0xf2/0x120 [ 48.029388][ T4223] x64_sys_call+0x1af/0x2fb0 [ 48.029443][ T4223] do_syscall_64+0xd2/0x200 [ 48.029516][ T4223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.029539][ T4223] ? clear_bhb_loop+0x40/0x90 [ 48.029557][ T4223] ? clear_bhb_loop+0x40/0x90 [ 48.029606][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.029626][ T4223] RIP: 0033:0x7f4d6147e929 [ 48.029639][ T4223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.029653][ T4223] RSP: 002b:00007f4d5fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.029678][ T4223] RAX: ffffffffffffffda RBX: 00007f4d616a5fa0 RCX: 00007f4d6147e929 [ 48.029689][ T4223] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 48.029700][ T4223] RBP: 00007f4d5fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.029712][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.029725][ T4223] R13: 0000000000000000 R14: 00007f4d616a5fa0 R15: 00007ffe34f9e318 [ 48.029743][ T4223] [ 48.029806][ T4223] syz.0.238: vmalloc error: size 8904, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 48.317098][ T4223] CPU: 0 UID: 0 PID: 4223 Comm: syz.0.238 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 48.317126][ T4223] Tainted: [W]=WARN [ 48.317131][ T4223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.317203][ T4223] Call Trace: [ 48.317210][ T4223] [ 48.317218][ T4223] __dump_stack+0x1d/0x30 [ 48.317240][ T4223] dump_stack_lvl+0xe8/0x140 [ 48.317257][ T4223] dump_stack+0x15/0x1b [ 48.317270][ T4223] warn_alloc+0x12b/0x1a0 [ 48.317444][ T4223] __vmalloc_node_range_noprof+0x297/0xe00 [ 48.317473][ T4223] ? klist_dec_and_del+0xba/0x270 [ 48.317492][ T4223] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 48.317554][ T4223] ? _raw_spin_unlock+0x26/0x50 [ 48.317645][ T4223] ? n_tty_open+0x1b/0xf0 [ 48.317665][ T4223] vzalloc_noprof+0x82/0xc0 [ 48.317687][ T4223] ? n_tty_open+0x1b/0xf0 [ 48.317720][ T4223] n_tty_open+0x1b/0xf0 [ 48.317736][ T4223] tty_ldisc_setup+0x83/0x220 [ 48.317764][ T4223] tty_init_dev+0x183/0x330 [ 48.317790][ T4223] tty_open+0x6cc/0xaf0 [ 48.317858][ T4223] chrdev_open+0x2eb/0x3a0 [ 48.317958][ T4223] do_dentry_open+0x646/0xa20 [ 48.317980][ T4223] ? __pfx_chrdev_open+0x10/0x10 [ 48.318001][ T4223] vfs_open+0x37/0x1e0 [ 48.318036][ T4223] path_openat+0x1c5e/0x2170 [ 48.318071][ T4223] do_filp_open+0x109/0x230 [ 48.318103][ T4223] do_sys_openat2+0xa6/0x110 [ 48.318200][ T4223] __x64_sys_openat+0xf2/0x120 [ 48.318263][ T4223] x64_sys_call+0x1af/0x2fb0 [ 48.318331][ T4223] do_syscall_64+0xd2/0x200 [ 48.318361][ T4223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.318451][ T4223] ? clear_bhb_loop+0x40/0x90 [ 48.318471][ T4223] ? clear_bhb_loop+0x40/0x90 [ 48.318492][ T4223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.318579][ T4223] RIP: 0033:0x7f4d6147e929 [ 48.318595][ T4223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.318611][ T4223] RSP: 002b:00007f4d5fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 48.318630][ T4223] RAX: ffffffffffffffda RBX: 00007f4d616a5fa0 RCX: 00007f4d6147e929 [ 48.318642][ T4223] RDX: 0000000000008000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 48.318654][ T4223] RBP: 00007f4d5fae7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.318697][ T4223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.318707][ T4223] R13: 0000000000000000 R14: 00007f4d616a5fa0 R15: 00007ffe34f9e318 [ 48.318722][ T4223] [ 48.318739][ T4223] Mem-Info: [ 48.567549][ T4223] active_anon:6861 inactive_anon:0 isolated_anon:0 [ 48.567549][ T4223] active_file:6201 inactive_file:2236 isolated_file:0 [ 48.567549][ T4223] unevictable:0 dirty:1500 writeback:0 [ 48.567549][ T4223] slab_reclaimable:2985 slab_unreclaimable:14291 [ 48.567549][ T4223] mapped:29263 shmem:278 pagetables:1284 [ 48.567549][ T4223] sec_pagetables:0 bounce:0 [ 48.567549][ T4223] kernel_misc_reclaimable:0 [ 48.567549][ T4223] free:1891947 free_pcp:16360 free_cma:0 [ 48.612571][ T4223] Node 0 active_anon:28372kB inactive_anon:0kB active_file:24804kB inactive_file:8944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117052kB dirty:6000kB writeback:0kB shmem:1924kB writeback_tmp:0kB kernel_stack:3360kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 48.613181][ T4232] loop2: detected capacity change from 0 to 1764 [ 48.641502][ T4223] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 48.676443][ T4223] lowmem_reserve[]: 0 2882 7860 7860 [ 48.681898][ T4223] Node 0 DMA32 free:2947740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951368kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 48.712216][ T4223] lowmem_reserve[]: 0 0 4978 4978 [ 48.717276][ T4223] Node 0 Normal free:4604572kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27560kB inactive_anon:0kB active_file:24804kB inactive_file:8944kB unevictable:0kB writepending:6000kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:61824kB local_pcp:21660kB free_cma:0kB [ 48.726173][ T4237] loop4: detected capacity change from 0 to 512 [ 48.749254][ T4223] lowmem_reserve[]: 0 0 0 0 [ 48.749293][ T4223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 48.765198][ T4232] loop2: detected capacity change from 0 to 128 [ 48.772812][ T4223] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947740kB [ 48.795278][ T4223] Node 0 Normal: 263*4kB (UME) 158*8kB (UME) 114*16kB (UM) 97*32kB (M) 50*64kB (UME) 27*128kB (UM) 22*256kB (UM) 7*512kB (UM) 6*1024kB (UE) 4*2048kB (UME) 1115*4096kB (UM) = 4604492kB [ 48.806662][ T4237] /dev/loop4: Can't open blockdev [ 48.813715][ T4223] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 48.828073][ T4223] 8828 total pagecache pages [ 48.832746][ T4223] 0 pages in swap cache [ 48.836900][ T4223] Free swap = 124996kB [ 48.841064][ T4223] Total swap = 124996kB [ 48.845229][ T4223] 2097051 pages RAM [ 48.849012][ T4223] 0 pages HighMem/MovableOnly [ 48.853690][ T4223] 80809 pages reserved [ 48.857745][ T4223] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 48.865112][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.904838][ T4245] loop4: detected capacity change from 0 to 128 [ 48.947900][ T4250] loop1: detected capacity change from 0 to 256 [ 48.964214][ T4250] FAT-fs (loop1): Directory bread(block 64) failed [ 48.974641][ T4250] FAT-fs (loop1): Directory bread(block 65) failed [ 48.974681][ T4250] FAT-fs (loop1): Directory bread(block 66) failed [ 48.974700][ T4250] FAT-fs (loop1): Directory bread(block 67) failed [ 48.974769][ T4250] FAT-fs (loop1): Directory bread(block 68) failed [ 48.974786][ T4250] FAT-fs (loop1): Directory bread(block 69) failed [ 48.974809][ T4250] FAT-fs (loop1): Directory bread(block 70) failed [ 48.974826][ T4250] FAT-fs (loop1): Directory bread(block 71) failed [ 48.974847][ T4250] FAT-fs (loop1): Directory bread(block 72) failed [ 48.974876][ T4250] FAT-fs (loop1): Directory bread(block 73) failed [ 49.017560][ T4255] loop4: detected capacity change from 0 to 512 [ 49.025827][ T4256] loop0: detected capacity change from 0 to 128 [ 49.035323][ T4255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.035387][ T4255] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.037742][ T4256] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.038098][ T4256] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.058145][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.110781][ T3423] IPVS: starting estimator thread 0... [ 49.204418][ T4268] netlink: 'syz.4.249': attribute type 9 has an invalid length. [ 49.230470][ T4261] IPVS: using max 2592 ests per chain, 129600 per kthread [ 49.761785][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.798403][ T4290] loop0: detected capacity change from 0 to 1764 [ 49.838893][ T4293] loop1: detected capacity change from 0 to 512 [ 49.848520][ T4293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.883459][ T4293] EXT4-fs (loop1): 1 orphan inode deleted [ 49.889612][ T4293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.902381][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 49.902478][ T4293] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.949338][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.985344][ T4297] batman_adv: batadv0: Adding interface: gretap1 [ 49.991825][ T4297] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.017803][ T4297] batman_adv: batadv0: Interface activated: gretap1 [ 50.152321][ T4310] netlink: 'syz.4.266': attribute type 13 has an invalid length. [ 50.183697][ T4311] loop1: detected capacity change from 0 to 2048 [ 50.209486][ T4311] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 50.289003][ T4321] __nla_validate_parse: 20 callbacks suppressed [ 50.289017][ T4321] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 50.307062][ T4311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.431787][ T4310] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.440814][ T4310] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.449680][ T4310] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.458606][ T4310] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.501118][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.656326][ T4341] netlink: 'syz.3.278': attribute type 8 has an invalid length. [ 50.728402][ T4348] bridge0: port 1(syz_tun) entered blocking state [ 50.734926][ T4348] bridge0: port 1(syz_tun) entered disabled state [ 50.744039][ T4348] syz_tun: entered allmulticast mode [ 50.749949][ T4348] syz_tun: entered promiscuous mode [ 50.757397][ T4348] bridge0: port 1(syz_tun) entered blocking state [ 50.764023][ T4348] bridge0: port 1(syz_tun) entered forwarding state [ 50.776608][ T4350] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 50.794446][ T4348] syz_tun: left allmulticast mode [ 50.799534][ T4348] syz_tun: left promiscuous mode [ 50.804886][ T4348] bridge0: port 1(syz_tun) entered disabled state [ 50.856393][ T4348] batman_adv: batadv0: Interface deactivated: gretap1 [ 50.863419][ T4348] batman_adv: batadv0: Removing interface: gretap1 [ 50.895572][ T4359] loop2: detected capacity change from 0 to 2048 [ 51.004643][ T4359] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 51.006435][ T4366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 51.025303][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 51.137559][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.137615][ T4375] netlink: 'syz.3.292': attribute type 8 has an invalid length. [ 51.203928][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.365026][ T4407] netlink: 'syz.0.306': attribute type 13 has an invalid length. [ 51.387828][ T4407] gretap0: refused to change device tx_queue_len [ 51.394654][ T4408] netlink: 'syz.3.307': attribute type 8 has an invalid length. [ 51.402961][ T4407] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.444314][ T4407] loop0: detected capacity change from 0 to 512 [ 51.496954][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.526134][ T4407] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.556569][ T4407] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.306: Failed to acquire dquot type 1 [ 51.570020][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 51.609500][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.729002][ T4428] syz.1.314 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.751362][ T4428] loop1: detected capacity change from 0 to 512 [ 51.759730][ T4428] ext4: Unknown parameter 'dont_measure' [ 51.774968][ T4433] loop3: detected capacity change from 0 to 1024 [ 51.811492][ T4433] journal_path: Non-blockdev passed as './file1' [ 51.817872][ T4433] EXT4-fs: error: could not find journal device path [ 51.819702][ T4432] loop0: detected capacity change from 0 to 2048 [ 51.827268][ T4440] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 51.845263][ T4439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.865692][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.866827][ T4432] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 51.874512][ T4441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 51.924727][ T4432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.026374][ T4453] loop4: detected capacity change from 0 to 8192 [ 52.092066][ T4453] FAULT_INJECTION: forcing a failure. [ 52.092066][ T4453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.105195][ T4453] CPU: 0 UID: 0 PID: 4453 Comm: syz.4.321 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 52.105277][ T4453] Tainted: [W]=WARN [ 52.105283][ T4453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.105292][ T4453] Call Trace: [ 52.105298][ T4453] [ 52.105305][ T4453] __dump_stack+0x1d/0x30 [ 52.105326][ T4453] dump_stack_lvl+0xe8/0x140 [ 52.105402][ T4453] dump_stack+0x15/0x1b [ 52.105416][ T4453] should_fail_ex+0x265/0x280 [ 52.105445][ T4453] should_fail+0xb/0x20 [ 52.105519][ T4453] should_fail_usercopy+0x1a/0x20 [ 52.105543][ T4453] _copy_to_user+0x20/0xa0 [ 52.105618][ T4453] simple_read_from_buffer+0xb5/0x130 [ 52.105649][ T4453] proc_fail_nth_read+0x100/0x140 [ 52.105682][ T4453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.105723][ T4453] vfs_read+0x1a0/0x6f0 [ 52.105745][ T4453] ? putname+0xda/0x100 [ 52.105760][ T4453] ? __rcu_read_unlock+0x4f/0x70 [ 52.105778][ T4453] ? __fget_files+0x184/0x1c0 [ 52.105868][ T4453] ksys_read+0xda/0x1a0 [ 52.105897][ T4453] __x64_sys_read+0x40/0x50 [ 52.105926][ T4453] x64_sys_call+0x2d77/0x2fb0 [ 52.105947][ T4453] do_syscall_64+0xd2/0x200 [ 52.106102][ T4453] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.106167][ T4453] ? clear_bhb_loop+0x40/0x90 [ 52.106194][ T4453] ? clear_bhb_loop+0x40/0x90 [ 52.106216][ T4453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.106237][ T4453] RIP: 0033:0x7f3c1480d33c [ 52.106252][ T4453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.106346][ T4453] RSP: 002b:00007f3c12e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.106365][ T4453] RAX: ffffffffffffffda RBX: 00007f3c14a35fa0 RCX: 00007f3c1480d33c [ 52.106377][ T4453] RDX: 000000000000000f RSI: 00007f3c12e770a0 RDI: 0000000000000005 [ 52.106387][ T4453] RBP: 00007f3c12e77090 R08: 0000000000000000 R09: 0000000000000000 [ 52.106397][ T4453] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 52.106407][ T4453] R13: 0000000000000000 R14: 00007f3c14a35fa0 R15: 00007fff76b73ee8 [ 52.106422][ T4453] [ 52.343827][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.412894][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 52.412908][ T29] audit: type=1326 audit(2000000016.709:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.492181][ T29] audit: type=1326 audit(2000000016.709:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.515798][ T29] audit: type=1326 audit(2000000016.709:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.539363][ T29] audit: type=1326 audit(2000000016.709:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.562785][ T29] audit: type=1326 audit(2000000016.709:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.586338][ T29] audit: type=1326 audit(2000000016.709:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.609724][ T29] audit: type=1326 audit(2000000016.709:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.633449][ T29] audit: type=1326 audit(2000000016.709:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.656841][ T29] audit: type=1326 audit(2000000016.709:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.670147][ T4470] loop4: detected capacity change from 0 to 1024 [ 52.680162][ T29] audit: type=1326 audit(2000000016.709:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4462 comm="syz.4.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1480e929 code=0x7ffc0000 [ 52.727252][ T4474] loop2: detected capacity change from 0 to 512 [ 52.737411][ T4474] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.747552][ T4478] FAULT_INJECTION: forcing a failure. [ 52.747552][ T4478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.760730][ T4478] CPU: 0 UID: 0 PID: 4478 Comm: syz.3.330 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 52.760757][ T4478] Tainted: [W]=WARN [ 52.760764][ T4478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.760776][ T4478] Call Trace: [ 52.760783][ T4478] [ 52.760789][ T4478] __dump_stack+0x1d/0x30 [ 52.760899][ T4478] dump_stack_lvl+0xe8/0x140 [ 52.760936][ T4478] dump_stack+0x15/0x1b [ 52.760950][ T4478] should_fail_ex+0x265/0x280 [ 52.760974][ T4478] should_fail+0xb/0x20 [ 52.761029][ T4478] should_fail_usercopy+0x1a/0x20 [ 52.761056][ T4478] strncpy_from_user+0x25/0x230 [ 52.761077][ T4478] ? kmem_cache_alloc_noprof+0x186/0x310 [ 52.761131][ T4478] ? getname_flags+0x80/0x3b0 [ 52.761151][ T4478] getname_flags+0xae/0x3b0 [ 52.761170][ T4478] __se_sys_newlstat+0x4b/0x280 [ 52.761197][ T4478] ? fput+0x8f/0xc0 [ 52.761238][ T4478] ? ksys_write+0x192/0x1a0 [ 52.761309][ T4478] __x64_sys_newlstat+0x31/0x40 [ 52.761329][ T4478] x64_sys_call+0x1c47/0x2fb0 [ 52.761349][ T4478] do_syscall_64+0xd2/0x200 [ 52.761373][ T4478] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.761402][ T4478] ? clear_bhb_loop+0x40/0x90 [ 52.761420][ T4478] ? clear_bhb_loop+0x40/0x90 [ 52.761439][ T4478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.761455][ T4478] RIP: 0033:0x7f61f3d2e929 [ 52.761468][ T4478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.761542][ T4478] RSP: 002b:00007f61f2397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 52.761609][ T4478] RAX: ffffffffffffffda RBX: 00007f61f3f55fa0 RCX: 00007f61f3d2e929 [ 52.761622][ T4478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 52.761634][ T4478] RBP: 00007f61f2397090 R08: 0000000000000000 R09: 0000000000000000 [ 52.761644][ T4478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.761654][ T4478] R13: 0000000000000001 R14: 00007f61f3f55fa0 R15: 00007fff46b0b4e8 [ 52.761671][ T4478] [ 52.979271][ T4474] EXT4-fs (loop2): 1 truncate cleaned up [ 52.991651][ T4474] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.999486][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.016526][ T4470] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.054884][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.078578][ T4463] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm syz.4.326: lblock 1 mapped to illegal pblock 1 (length 15) [ 53.127301][ T4463] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 53.139981][ T4463] EXT4-fs (loop4): This should not happen!! Data will be lost [ 53.139981][ T4463] [ 53.141236][ T4470] netlink: 'syz.4.326': attribute type 21 has an invalid length. [ 53.172143][ T4470] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 53.179819][ T4470] netlink: 144 bytes leftover after parsing attributes in process `syz.4.326'. [ 53.217392][ T4463] pim6reg: entered allmulticast mode [ 53.235787][ T4462] pim6reg: left allmulticast mode [ 53.265400][ T4512] netlink: 332 bytes leftover after parsing attributes in process `syz.3.339'. [ 53.275060][ T4512] netlink: 'syz.3.339': attribute type 9 has an invalid length. [ 53.320756][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.360020][ T4519] xt_hashlimit: max too large, truncated to 1048576 [ 53.417406][ T4523] loop4: detected capacity change from 0 to 2048 [ 53.464183][ T4523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.534044][ T4530] FAULT_INJECTION: forcing a failure. [ 53.534044][ T4530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.547228][ T4530] CPU: 1 UID: 0 PID: 4530 Comm: +}[@ Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 53.547286][ T4530] Tainted: [W]=WARN [ 53.547293][ T4530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.547335][ T4530] Call Trace: [ 53.547341][ T4530] [ 53.547347][ T4530] __dump_stack+0x1d/0x30 [ 53.547366][ T4530] dump_stack_lvl+0xe8/0x140 [ 53.547381][ T4530] dump_stack+0x15/0x1b [ 53.547395][ T4530] should_fail_ex+0x265/0x280 [ 53.547472][ T4530] should_fail+0xb/0x20 [ 53.547492][ T4530] should_fail_usercopy+0x1a/0x20 [ 53.547516][ T4530] _copy_from_user+0x1c/0xb0 [ 53.547536][ T4530] copy_from_sockptr_offset+0x66/0xa0 [ 53.547568][ T4530] do_ipt_set_ctl+0x5c8/0x820 [ 53.547680][ T4530] nf_setsockopt+0x196/0x1b0 [ 53.547697][ T4530] ip_setsockopt+0x102/0x110 [ 53.547719][ T4530] udp_setsockopt+0x99/0xb0 [ 53.547744][ T4530] sock_common_setsockopt+0x69/0x80 [ 53.547798][ T4530] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 53.547823][ T4530] __sys_setsockopt+0x184/0x200 [ 53.547852][ T4530] __x64_sys_setsockopt+0x64/0x80 [ 53.547876][ T4530] x64_sys_call+0x2bd5/0x2fb0 [ 53.547922][ T4530] do_syscall_64+0xd2/0x200 [ 53.547953][ T4530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.547988][ T4530] ? clear_bhb_loop+0x40/0x90 [ 53.548006][ T4530] ? clear_bhb_loop+0x40/0x90 [ 53.548064][ T4530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.548083][ T4530] RIP: 0033:0x7f4d6147e929 [ 53.548098][ T4530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.548121][ T4530] RSP: 002b:00007f4d5fae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 53.548182][ T4530] RAX: ffffffffffffffda RBX: 00007f4d616a5fa0 RCX: 00007f4d6147e929 [ 53.548245][ T4530] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.548255][ T4530] RBP: 00007f4d5fae7090 R08: 0000000000000538 R09: 0000000000000000 [ 53.548266][ T4530] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 53.548276][ T4530] R13: 0000000000000000 R14: 00007f4d616a5fa0 R15: 00007ffe34f9e318 [ 53.548292][ T4530] [ 53.977854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.149915][ T4551] Invalid ELF header type: 3 != 1 [ 54.167418][ T4549] loop1: detected capacity change from 0 to 1764 [ 54.343266][ T4562] SELinux: policydb magic number 0x65686373 does not match expected magic number 0xf97cff8c [ 54.353689][ T4562] SELinux: failed to load policy [ 54.381518][ T4504] syz.2.335 (4504) used greatest stack depth: 9272 bytes left [ 54.451251][ T4497] syz.2.335 (4497) used greatest stack depth: 6952 bytes left [ 54.507764][ T4569] loop0: detected capacity change from 0 to 2048 [ 54.514460][ T4569] ext4: Unknown parameter 'kfree' [ 54.556993][ T4573] loop0: detected capacity change from 0 to 2048 [ 54.586137][ T4575] loop2: detected capacity change from 0 to 2048 [ 54.587006][ T4573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.626965][ T4575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.813438][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.950523][ T4591] 9pnet: Could not find request transport: fdo [ 55.174769][ T4606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.192314][ T4606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.415177][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.434497][ T4615] __nla_validate_parse: 5 callbacks suppressed [ 55.434510][ T4615] netlink: 332 bytes leftover after parsing attributes in process `syz.4.376'. [ 55.450442][ T4615] netlink: 'syz.4.376': attribute type 9 has an invalid length. [ 55.458104][ T4615] netlink: 108 bytes leftover after parsing attributes in process `syz.4.376'. [ 55.467131][ T4615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.376'. [ 55.497462][ T4618] loop2: detected capacity change from 0 to 512 [ 55.553222][ T4618] EXT4-fs (loop2): 1 orphan inode deleted [ 55.580497][ T2158] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 55.597723][ T4618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.631970][ T4618] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.657934][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.672490][ T4631] FAULT_INJECTION: forcing a failure. [ 55.672490][ T4631] name failslab, interval 1, probability 0, space 0, times 0 [ 55.685207][ T4631] CPU: 0 UID: 0 PID: 4631 Comm: syz.3.385 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 55.685237][ T4631] Tainted: [W]=WARN [ 55.685243][ T4631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.685254][ T4631] Call Trace: [ 55.685259][ T4631] [ 55.685265][ T4631] __dump_stack+0x1d/0x30 [ 55.685366][ T4631] dump_stack_lvl+0xe8/0x140 [ 55.685385][ T4631] dump_stack+0x15/0x1b [ 55.685415][ T4631] should_fail_ex+0x265/0x280 [ 55.685485][ T4631] should_failslab+0x8c/0xb0 [ 55.685532][ T4631] __kmalloc_cache_node_noprof+0x54/0x320 [ 55.685554][ T4631] ? __get_vm_area_node+0x106/0x1d0 [ 55.685603][ T4631] __get_vm_area_node+0x106/0x1d0 [ 55.685631][ T4631] __vmalloc_node_range_noprof+0x273/0xe00 [ 55.685659][ T4631] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 55.685730][ T4631] ? avc_has_extended_perms+0x73d/0x940 [ 55.685760][ T4631] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 55.685788][ T4631] __vmalloc_noprof+0x83/0xc0 [ 55.685815][ T4631] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 55.685847][ T4631] ? __pfx_ppp_ioctl+0x1/0x10 [ 55.685967][ T4631] bpf_prog_alloc_no_stats+0x47/0x390 [ 55.685993][ T4631] ? bpf_prog_alloc+0x2a/0x150 [ 55.686018][ T4631] ? __pfx_ppp_ioctl+0x1/0x10 [ 55.686039][ T4631] bpf_prog_alloc+0x3c/0x150 [ 55.686111][ T4631] ? __pfx_ppp_ioctl+0x1/0x10 [ 55.686132][ T4631] bpf_prog_create+0x73/0x130 [ 55.686220][ T4631] ? __pfx_ppp_ioctl+0x10/0x10 [ 55.686250][ T4631] ppp_get_filter+0x113/0x160 [ 55.686271][ T4631] ppp_ioctl+0xb93/0x11c0 [ 55.686290][ T4631] ? __fget_files+0x184/0x1c0 [ 55.686307][ T4631] ? __pfx_ppp_ioctl+0x10/0x10 [ 55.686382][ T4631] __se_sys_ioctl+0xce/0x140 [ 55.686406][ T4631] __x64_sys_ioctl+0x43/0x50 [ 55.686432][ T4631] x64_sys_call+0x19a8/0x2fb0 [ 55.686452][ T4631] do_syscall_64+0xd2/0x200 [ 55.686553][ T4631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.686576][ T4631] ? clear_bhb_loop+0x40/0x90 [ 55.686593][ T4631] ? clear_bhb_loop+0x40/0x90 [ 55.686613][ T4631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.686632][ T4631] RIP: 0033:0x7f61f3d2e929 [ 55.686646][ T4631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.686712][ T4631] RSP: 002b:00007f61f2397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.686728][ T4631] RAX: ffffffffffffffda RBX: 00007f61f3f55fa0 RCX: 00007f61f3d2e929 [ 55.686739][ T4631] RDX: 00002000000001c0 RSI: 0000000040107447 RDI: 0000000000000005 [ 55.686749][ T4631] RBP: 00007f61f2397090 R08: 0000000000000000 R09: 0000000000000000 [ 55.686761][ T4631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.686773][ T4631] R13: 0000000000000000 R14: 00007f61f3f55fa0 R15: 00007fff46b0b4e8 [ 55.686809][ T4631] [ 55.744358][ T4634] netlink: 332 bytes leftover after parsing attributes in process `syz.2.384'. [ 55.827122][ T4636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 55.829419][ T4634] netlink: 'syz.2.384': attribute type 9 has an invalid length. [ 55.835487][ T4636] FAULT_INJECTION: forcing a failure. [ 55.835487][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 55.838648][ T4634] netlink: 108 bytes leftover after parsing attributes in process `syz.2.384'. [ 55.843035][ T4636] CPU: 0 UID: 0 PID: 4636 Comm: syz.1.387 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 55.843127][ T4636] Tainted: [W]=WARN [ 55.843134][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.843145][ T4636] Call Trace: [ 55.843151][ T4636] [ 55.843158][ T4636] __dump_stack+0x1d/0x30 [ 55.843180][ T4636] dump_stack_lvl+0xe8/0x140 [ 55.843199][ T4636] dump_stack+0x15/0x1b [ 55.843232][ T4636] should_fail_ex+0x265/0x280 [ 55.843260][ T4636] should_failslab+0x8c/0xb0 [ 55.843336][ T4636] __kvmalloc_node_noprof+0x123/0x4e0 [ 55.843362][ T4636] ? nf_hook_entries_grow+0x1bc/0x450 [ 55.843424][ T4636] nf_hook_entries_grow+0x1bc/0x450 [ 55.843456][ T4636] __nf_register_net_hook+0x18e/0x480 [ 55.843559][ T4636] nf_register_net_hook+0x88/0x130 [ 55.843586][ T4636] nf_register_net_hooks+0x44/0x150 [ 55.843614][ T4636] nf_defrag_ipv4_enable+0x6e/0xc0 [ 55.843652][ T4636] nf_ct_netns_do_get+0x13c/0x380 [ 55.843749][ T4636] nf_ct_netns_get+0x87/0xc0 [ 55.843834][ T4636] nft_masq_init+0x119/0x140 [ 55.843862][ T4636] nf_tables_newrule+0xfad/0x17a0 [ 55.843906][ T4636] ? __nla_parse+0x40/0x60 [ 55.843935][ T4636] nfnetlink_rcv+0xb96/0x1690 [ 55.844051][ T4636] netlink_unicast+0x59e/0x670 [ 55.844084][ T4636] netlink_sendmsg+0x58b/0x6b0 [ 55.844128][ T4636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.844158][ T4636] __sock_sendmsg+0x142/0x180 [ 55.844201][ T4636] ____sys_sendmsg+0x31e/0x4e0 [ 55.844232][ T4636] ___sys_sendmsg+0x17b/0x1d0 [ 55.844272][ T4636] __x64_sys_sendmsg+0xd4/0x160 [ 55.844365][ T4636] x64_sys_call+0x2999/0x2fb0 [ 55.844385][ T4636] do_syscall_64+0xd2/0x200 [ 55.844414][ T4636] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.844477][ T4636] ? clear_bhb_loop+0x40/0x90 [ 55.844498][ T4636] ? clear_bhb_loop+0x40/0x90 [ 55.844519][ T4636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.844550][ T4636] RIP: 0033:0x7f03daffe929 [ 55.844565][ T4636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.844599][ T4636] RSP: 002b:00007f03d9667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.844617][ T4636] RAX: ffffffffffffffda RBX: 00007f03db225fa0 RCX: 00007f03daffe929 [ 55.844630][ T4636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 55.844642][ T4636] RBP: 00007f03d9667090 R08: 0000000000000000 R09: 0000000000000000 [ 55.844653][ T4636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.844688][ T4636] R13: 0000000000000000 R14: 00007f03db225fa0 R15: 00007ffc69055ea8 [ 55.844705][ T4636] [ 56.242852][ T4645] loop4: detected capacity change from 0 to 2048 [ 56.248752][ T4634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 56.281869][ T4645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.354302][ T4649] loop1: detected capacity change from 0 to 1764 [ 56.392022][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.459746][ T4662] loop0: detected capacity change from 0 to 512 [ 56.475560][ T4662] EXT4-fs (loop0): 1 orphan inode deleted [ 56.481943][ T4662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.495440][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 56.498420][ T4662] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.543645][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.593872][ T4677] netlink: 332 bytes leftover after parsing attributes in process `syz.4.396'. [ 56.621726][ T4677] netlink: 'syz.4.396': attribute type 9 has an invalid length. [ 56.629457][ T4677] netlink: 108 bytes leftover after parsing attributes in process `syz.4.396'. [ 56.638771][ T4677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'. [ 56.650976][ T4678] netlink: 'syz.0.398': attribute type 9 has an invalid length. [ 56.667506][ T4680] loop3: detected capacity change from 0 to 1024 [ 56.697047][ T4680] journal_path: Lookup failure for './file0/file0' [ 56.703662][ T4680] EXT4-fs: error: could not find journal device path [ 56.709529][ T4686] bridge_slave_0: left allmulticast mode [ 56.716114][ T4686] bridge_slave_0: left promiscuous mode [ 56.721963][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.733211][ T4686] bridge_slave_1: left allmulticast mode [ 56.738908][ T4686] bridge_slave_1: left promiscuous mode [ 56.744600][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.764210][ T4686] team0: Port device team_slave_0 removed [ 56.776975][ T4686] team0: Port device team_slave_1 removed [ 56.783639][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.791129][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.799604][ T4686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.807193][ T4686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.826359][ T4686] batman_adv: batadv0: Interface deactivated: gretap1 [ 56.827685][ T4691] loop3: detected capacity change from 0 to 256 [ 56.833232][ T4686] batman_adv: batadv0: Removing interface: gretap1 [ 56.866108][ T4691] FAT-fs (loop3): Directory bread(block 64) failed [ 56.879573][ T4691] FAT-fs (loop3): Directory bread(block 65) failed [ 56.887223][ T4691] FAT-fs (loop3): Directory bread(block 66) failed [ 56.894180][ T4691] FAT-fs (loop3): Directory bread(block 67) failed [ 56.901183][ T4691] FAT-fs (loop3): Directory bread(block 68) failed [ 56.907950][ T4691] FAT-fs (loop3): Directory bread(block 69) failed [ 56.915689][ T4691] FAT-fs (loop3): Directory bread(block 70) failed [ 56.923043][ T4691] FAT-fs (loop3): Directory bread(block 71) failed [ 56.930078][ T4691] FAT-fs (loop3): Directory bread(block 72) failed [ 56.937665][ T4691] FAT-fs (loop3): Directory bread(block 73) failed [ 57.044277][ T4700] netlink: 'syz.2.408': attribute type 9 has an invalid length. [ 57.309288][ T4714] netlink: 'syz.1.414': attribute type 9 has an invalid length. [ 57.472674][ T4727] loop4: detected capacity change from 0 to 1764 [ 57.523196][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 57.523212][ T29] audit: type=1326 audit(2000000021.819:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.526330][ T4729] netlink: 'syz.0.421': attribute type 8 has an invalid length. [ 57.529452][ T29] audit: type=1326 audit(2000000021.819:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.584223][ T29] audit: type=1326 audit(2000000021.819:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.607670][ T29] audit: type=1326 audit(2000000021.819:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.631229][ T29] audit: type=1326 audit(2000000021.819:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.654600][ T29] audit: type=1326 audit(2000000021.819:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.678120][ T29] audit: type=1326 audit(2000000021.819:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.701511][ T29] audit: type=1326 audit(2000000021.819:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.724842][ T29] audit: type=1326 audit(2000000021.819:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 57.748230][ T29] audit: type=1326 audit(2000000021.819:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4728 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 58.147504][ T4775] loop1: detected capacity change from 0 to 256 [ 58.167539][ T4775] FAT-fs (loop1): Directory bread(block 64) failed [ 58.177420][ T4775] FAT-fs (loop1): Directory bread(block 65) failed [ 58.186835][ T4775] FAT-fs (loop1): Directory bread(block 66) failed [ 58.194216][ T4775] FAT-fs (loop1): Directory bread(block 67) failed [ 58.202183][ T4775] FAT-fs (loop1): Directory bread(block 68) failed [ 58.208915][ T4775] FAT-fs (loop1): Directory bread(block 69) failed [ 58.216180][ T4775] FAT-fs (loop1): Directory bread(block 70) failed [ 58.236732][ T4775] FAT-fs (loop1): Directory bread(block 71) failed [ 58.245409][ T4775] FAT-fs (loop1): Directory bread(block 72) failed [ 58.252590][ T4775] FAT-fs (loop1): Directory bread(block 73) failed [ 58.381277][ T4797] binfmt_misc: register: failed to install interpreter file ./file2 [ 58.427670][ T4804] bridge0: port 1(syz_tun) entered blocking state [ 58.434231][ T4804] bridge0: port 1(syz_tun) entered disabled state [ 58.441011][ T4804] syz_tun: entered allmulticast mode [ 58.446770][ T4804] syz_tun: entered promiscuous mode [ 58.452373][ T4804] bridge0: port 1(syz_tun) entered blocking state [ 58.458843][ T4804] bridge0: port 1(syz_tun) entered forwarding state [ 58.466657][ T4806] bridge0: port 1(syz_tun) entered blocking state [ 58.473215][ T4806] bridge0: port 1(syz_tun) entered disabled state [ 58.479722][ T4806] syz_tun: entered allmulticast mode [ 58.485529][ T4806] syz_tun: entered promiscuous mode [ 58.494529][ T4804] syz_tun: left allmulticast mode [ 58.499563][ T4804] syz_tun: left promiscuous mode [ 58.504775][ T4804] bridge0: port 1(syz_tun) entered disabled state [ 58.533498][ T4806] syz_tun: left allmulticast mode [ 58.538579][ T4806] syz_tun: left promiscuous mode [ 58.543717][ T4806] bridge0: port 1(syz_tun) entered disabled state [ 58.609137][ T4814] loop2: detected capacity change from 0 to 1764 [ 58.626158][ T4816] validate_nla: 2 callbacks suppressed [ 58.626170][ T4816] netlink: 'syz.4.458': attribute type 8 has an invalid length. [ 58.903386][ T4837] bridge0: port 1(syz_tun) entered blocking state [ 58.910317][ T4837] bridge0: port 1(syz_tun) entered disabled state [ 58.917116][ T4837] syz_tun: entered allmulticast mode [ 58.923141][ T4837] syz_tun: entered promiscuous mode [ 58.928631][ T4837] bridge0: port 1(syz_tun) entered blocking state [ 58.935186][ T4837] bridge0: port 1(syz_tun) entered forwarding state [ 58.949267][ T4837] syz_tun: left allmulticast mode [ 58.954663][ T4837] syz_tun: left promiscuous mode [ 58.959796][ T4837] bridge0: port 1(syz_tun) entered disabled state [ 59.006298][ T4838] loop0: detected capacity change from 0 to 512 [ 59.050907][ T4838] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.132187][ T4838] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.465: casefold flag without casefold feature [ 59.145670][ T4838] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.465: couldn't read orphan inode 15 (err -117) [ 59.505496][ T4859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.527973][ T4859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.647630][ T4875] bridge0: port 1(syz_tun) entered blocking state [ 59.654151][ T4875] bridge0: port 1(syz_tun) entered disabled state [ 59.690907][ T4875] syz_tun: entered allmulticast mode [ 59.696819][ T4875] syz_tun: entered promiscuous mode [ 59.725933][ T4875] bridge0: port 1(syz_tun) entered blocking state [ 59.732486][ T4875] bridge0: port 1(syz_tun) entered forwarding state [ 59.745151][ T4877] syz_tun: left allmulticast mode [ 59.750226][ T4877] syz_tun: left promiscuous mode [ 59.755401][ T4877] bridge0: port 1(syz_tun) entered disabled state [ 59.791198][ T4859] loop3: detected capacity change from 0 to 1764 [ 59.868423][ T4885] loop3: detected capacity change from 0 to 128 [ 59.956850][ T4885] bio_check_eod: 50 callbacks suppressed [ 59.956867][ T4885] syz.3.474: attempt to access beyond end of device [ 59.956867][ T4885] loop3: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 59.981121][ T4887] loop4: detected capacity change from 0 to 512 [ 59.988141][ T4887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.997620][ T4885] syz.3.474: attempt to access beyond end of device [ 59.997620][ T4885] loop3: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 60.011203][ T4885] syz.3.474: attempt to access beyond end of device [ 60.011203][ T4885] loop3: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 60.024561][ T4885] buffer_io_error: 44 callbacks suppressed [ 60.024571][ T4885] Buffer I/O error on dev loop3, logical block 156, lost async page write [ 60.039167][ T4885] syz.3.474: attempt to access beyond end of device [ 60.039167][ T4885] loop3: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 60.052565][ T4885] Buffer I/O error on dev loop3, logical block 157, lost async page write [ 60.061768][ T4887] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.483: casefold flag without casefold feature [ 60.094571][ T4885] syz.3.474: attempt to access beyond end of device [ 60.094571][ T4885] loop3: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 60.096605][ T4887] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.483: couldn't read orphan inode 15 (err -117) [ 60.108003][ T4885] Buffer I/O error on dev loop3, logical block 158, lost async page write [ 60.129083][ T4897] loop2: detected capacity change from 0 to 1764 [ 60.129098][ T4885] syz.3.474: attempt to access beyond end of device [ 60.129098][ T4885] loop3: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 60.148774][ T4885] Buffer I/O error on dev loop3, logical block 159, lost async page write [ 60.158660][ T4885] syz.3.474: attempt to access beyond end of device [ 60.158660][ T4885] loop3: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 60.172026][ T4885] Buffer I/O error on dev loop3, logical block 160, lost async page write [ 60.185863][ T4885] syz.3.474: attempt to access beyond end of device [ 60.185863][ T4885] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 60.199236][ T4885] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 60.208616][ T4885] syz.3.474: attempt to access beyond end of device [ 60.208616][ T4885] loop3: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 60.222059][ T4885] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 60.231046][ T4885] syz.3.474: attempt to access beyond end of device [ 60.231046][ T4885] loop3: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 60.244407][ T4885] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 60.253410][ T4885] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 60.262156][ T4885] Buffer I/O error on dev loop3, logical block 145, lost async page write [ 60.435019][ T4913] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 60.558749][ T4927] __nla_validate_parse: 29 callbacks suppressed [ 60.558763][ T4927] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 60.704280][ T4931] SELinux: Context Ü is not valid (left unmapped). [ 60.744479][ T4935] netlink: 'syz.1.505': attribute type 13 has an invalid length. [ 60.759138][ T4935] gretap0: refused to change device tx_queue_len [ 60.765721][ T4935] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.783343][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 60.975273][ T4953] vlan2: entered allmulticast mode [ 61.019971][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.027445][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.034994][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.091534][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.099153][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.106787][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.115720][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.123230][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.130775][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.138155][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.145720][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.153253][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.160833][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.168332][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.190178][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.197678][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.205103][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.212585][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.218528][ T4960] netlink: 332 bytes leftover after parsing attributes in process `syz.3.514'. [ 61.219964][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.219985][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.220004][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.220023][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.220043][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.231206][ T4960] netlink: 'syz.3.514': attribute type 9 has an invalid length. [ 61.236438][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.243833][ T4960] netlink: 108 bytes leftover after parsing attributes in process `syz.3.514'. [ 61.251271][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.258547][ T4960] netlink: 32 bytes leftover after parsing attributes in process `syz.3.514'. [ 61.265931][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.266023][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.321460][ T3423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.339254][ T3423] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz1] on syz0 [ 61.384902][ T4957] loop2: detected capacity change from 0 to 512 [ 61.392743][ T4957] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.402874][ T4957] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.513: casefold flag without casefold feature [ 61.406310][ T4965] fido_id[4965]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.422311][ T4957] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.513: couldn't read orphan inode 15 (err -117) [ 61.628412][ T4980] netlink: 332 bytes leftover after parsing attributes in process `syz.0.521'. [ 61.637537][ T4980] netlink: 'syz.0.521': attribute type 9 has an invalid length. [ 61.645201][ T4980] netlink: 108 bytes leftover after parsing attributes in process `syz.0.521'. [ 61.654329][ T4980] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 61.664784][ T4981] netlink: 332 bytes leftover after parsing attributes in process `syz.4.520'. [ 61.673940][ T4981] netlink: 'syz.4.520': attribute type 9 has an invalid length. [ 61.681631][ T4981] netlink: 108 bytes leftover after parsing attributes in process `syz.4.520'. [ 61.707908][ T4981] hub 1-0:1.0: USB hub found [ 61.712777][ T4981] hub 1-0:1.0: 8 ports detected [ 61.894479][ T4993] 9pnet_fd: Insufficient options for proto=fd [ 61.990117][ T4995] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 62.030267][ T4997] netlink: 'syz.3.527': attribute type 8 has an invalid length. [ 62.138924][ T5006] loop1: detected capacity change from 0 to 2048 [ 62.145931][ T5006] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.265020][ T5015] loop3: detected capacity change from 0 to 512 [ 62.283105][ T5015] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.309571][ T5015] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.529: casefold flag without casefold feature [ 62.334919][ T5015] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.529: couldn't read orphan inode 15 (err -117) [ 62.448383][ T5021] netlink: 'syz.4.535': attribute type 13 has an invalid length. [ 62.474711][ T5021] gretap0: refused to change device tx_queue_len [ 62.481155][ T5021] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.532992][ T29] kauditd_printk_skb: 605 callbacks suppressed [ 62.533006][ T29] audit: type=1326 audit(2000000026.829:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.564881][ T5031] netlink: 'syz.1.537': attribute type 9 has an invalid length. [ 62.571715][ T29] audit: type=1326 audit(2000000026.829:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.595932][ T29] audit: type=1326 audit(2000000026.829:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.619630][ T29] audit: type=1326 audit(2000000026.829:4571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.642943][ T29] audit: type=1326 audit(2000000026.829:4572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.666400][ T29] audit: type=1326 audit(2000000026.829:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.689782][ T29] audit: type=1326 audit(2000000026.829:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.713164][ T29] audit: type=1326 audit(2000000026.829:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.736645][ T29] audit: type=1326 audit(2000000026.829:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.760029][ T29] audit: type=1326 audit(2000000026.829:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5029 comm="syz.0.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 62.831679][ T5038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.840122][ T5038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.878117][ T5040] netlink: 'syz.4.539': attribute type 9 has an invalid length. [ 63.061738][ T5038] loop0: detected capacity change from 0 to 1764 [ 63.096505][ T5038] loop0: detected capacity change from 0 to 128 [ 63.107972][ T5058] netlink: 'syz.2.546': attribute type 9 has an invalid length. [ 63.132590][ T5058] hub 1-0:1.0: USB hub found [ 63.138369][ T5058] hub 1-0:1.0: 8 ports detected [ 63.448268][ T5072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.648833][ T5095] validate_nla: 1 callbacks suppressed [ 63.648884][ T5095] netlink: 'syz.3.562': attribute type 8 has an invalid length. [ 63.666157][ T5098] netlink: 'syz.1.560': attribute type 9 has an invalid length. [ 63.715407][ T5105] netlink: 'syz.0.563': attribute type 9 has an invalid length. [ 63.787986][ T5112] netlink: 'syz.4.568': attribute type 8 has an invalid length. [ 63.875165][ T5121] bridge0: port 1(syz_tun) entered blocking state [ 63.881828][ T5121] bridge0: port 1(syz_tun) entered disabled state [ 63.889028][ T5121] syz_tun: entered allmulticast mode [ 63.895773][ T5121] syz_tun: entered promiscuous mode [ 63.901835][ T5121] bridge0: port 1(syz_tun) entered blocking state [ 63.908294][ T5121] bridge0: port 1(syz_tun) entered forwarding state [ 63.937773][ T5121] syz_tun: left allmulticast mode [ 63.942908][ T5121] syz_tun: left promiscuous mode [ 63.947970][ T5121] bridge0: port 1(syz_tun) entered disabled state [ 64.061836][ T5135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.072996][ T5135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.153858][ T5143] netlink: 'syz.2.581': attribute type 8 has an invalid length. [ 64.304734][ T5135] loop3: detected capacity change from 0 to 1764 [ 64.361697][ T5135] loop3: detected capacity change from 0 to 128 [ 64.406295][ T5164] loop2: detected capacity change from 0 to 1024 [ 64.413301][ T5164] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.422869][ T5164] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.433833][ T5164] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.445299][ T5164] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 64.452157][ T5164] EXT4-fs (loop2): mount failed [ 64.459059][ T5164] FAULT_INJECTION: forcing a failure. [ 64.459059][ T5164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.472290][ T5164] CPU: 0 UID: 0 PID: 5164 Comm: syz.2.588 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 64.472321][ T5164] Tainted: [W]=WARN [ 64.472327][ T5164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.472338][ T5164] Call Trace: [ 64.472344][ T5164] [ 64.472352][ T5164] __dump_stack+0x1d/0x30 [ 64.472432][ T5164] dump_stack_lvl+0xe8/0x140 [ 64.472451][ T5164] dump_stack+0x15/0x1b [ 64.472466][ T5164] should_fail_ex+0x265/0x280 [ 64.472495][ T5164] should_fail+0xb/0x20 [ 64.472592][ T5164] should_fail_usercopy+0x1a/0x20 [ 64.472620][ T5164] _copy_from_user+0x1c/0xb0 [ 64.472638][ T5164] ___sys_sendmsg+0xc1/0x1d0 [ 64.472746][ T5164] __x64_sys_sendmsg+0xd4/0x160 [ 64.472846][ T5164] x64_sys_call+0x2999/0x2fb0 [ 64.472866][ T5164] do_syscall_64+0xd2/0x200 [ 64.472892][ T5164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 64.472934][ T5164] ? clear_bhb_loop+0x40/0x90 [ 64.472953][ T5164] ? clear_bhb_loop+0x40/0x90 [ 64.472974][ T5164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.472993][ T5164] RIP: 0033:0x7fb5b191e929 [ 64.473025][ T5164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.473039][ T5164] RSP: 002b:00007fb5aff87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.473055][ T5164] RAX: ffffffffffffffda RBX: 00007fb5b1b45fa0 RCX: 00007fb5b191e929 [ 64.473065][ T5164] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 64.473075][ T5164] RBP: 00007fb5aff87090 R08: 0000000000000000 R09: 0000000000000000 [ 64.473085][ T5164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.473173][ T5164] R13: 0000000000000000 R14: 00007fb5b1b45fa0 R15: 00007ffda3d33d78 [ 64.473192][ T5164] [ 64.673229][ T5167] loop1: detected capacity change from 0 to 512 [ 64.702415][ T5167] EXT4-fs: Mount option(s) incompatible with ext2 [ 64.804672][ T5178] netlink: 'syz.1.595': attribute type 8 has an invalid length. [ 64.838578][ T5184] loop2: detected capacity change from 0 to 256 [ 64.864349][ T5184] FAT-fs (loop2): Directory bread(block 64) failed [ 64.874189][ T5184] FAT-fs (loop2): Directory bread(block 65) failed [ 64.882202][ T5184] FAT-fs (loop2): Directory bread(block 66) failed [ 64.888820][ T5184] FAT-fs (loop2): Directory bread(block 67) failed [ 64.896495][ T5184] FAT-fs (loop2): Directory bread(block 68) failed [ 64.904020][ T5184] FAT-fs (loop2): Directory bread(block 69) failed [ 64.910734][ T5184] FAT-fs (loop2): Directory bread(block 70) failed [ 64.917290][ T5184] FAT-fs (loop2): Directory bread(block 71) failed [ 64.924867][ T5184] FAT-fs (loop2): Directory bread(block 72) failed [ 64.931624][ T5184] FAT-fs (loop2): Directory bread(block 73) failed [ 65.034101][ T5201] FAULT_INJECTION: forcing a failure. [ 65.034101][ T5201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.047265][ T5201] CPU: 1 UID: 0 PID: 5201 Comm: syz.1.602 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 65.047293][ T5201] Tainted: [W]=WARN [ 65.047300][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.047310][ T5201] Call Trace: [ 65.047315][ T5201] [ 65.047389][ T5201] __dump_stack+0x1d/0x30 [ 65.047440][ T5201] dump_stack_lvl+0xe8/0x140 [ 65.047456][ T5201] dump_stack+0x15/0x1b [ 65.047471][ T5201] should_fail_ex+0x265/0x280 [ 65.047501][ T5201] should_fail+0xb/0x20 [ 65.047525][ T5201] should_fail_usercopy+0x1a/0x20 [ 65.047602][ T5201] _copy_from_iter+0xcf/0xe40 [ 65.047630][ T5201] ? __build_skb_around+0x1a0/0x200 [ 65.047653][ T5201] ? __alloc_skb+0x223/0x320 [ 65.047705][ T5201] netlink_sendmsg+0x471/0x6b0 [ 65.047733][ T5201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.047773][ T5201] __sock_sendmsg+0x142/0x180 [ 65.047797][ T5201] ____sys_sendmsg+0x31e/0x4e0 [ 65.047903][ T5201] ___sys_sendmsg+0x17b/0x1d0 [ 65.048024][ T5201] __x64_sys_sendmsg+0xd4/0x160 [ 65.048051][ T5201] x64_sys_call+0x2999/0x2fb0 [ 65.048070][ T5201] do_syscall_64+0xd2/0x200 [ 65.048152][ T5201] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.048173][ T5201] ? clear_bhb_loop+0x40/0x90 [ 65.048190][ T5201] ? clear_bhb_loop+0x40/0x90 [ 65.048243][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.048344][ T5201] RIP: 0033:0x7f03daffe929 [ 65.048359][ T5201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.048375][ T5201] RSP: 002b:00007f03d9667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.048409][ T5201] RAX: ffffffffffffffda RBX: 00007f03db225fa0 RCX: 00007f03daffe929 [ 65.048421][ T5201] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 65.048433][ T5201] RBP: 00007f03d9667090 R08: 0000000000000000 R09: 0000000000000000 [ 65.048457][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.048467][ T5201] R13: 0000000000000000 R14: 00007f03db225fa0 R15: 00007ffc69055ea8 [ 65.048484][ T5201] [ 65.261158][ T5202] bridge0: port 1(syz_tun) entered blocking state [ 65.267649][ T5202] bridge0: port 1(syz_tun) entered disabled state [ 65.275905][ T5202] syz_tun: entered allmulticast mode [ 65.283029][ T5205] netlink: 'syz.1.604': attribute type 9 has an invalid length. [ 65.286791][ T5202] syz_tun: entered promiscuous mode [ 65.315503][ T5202] syz_tun: left allmulticast mode [ 65.320670][ T5202] syz_tun: left promiscuous mode [ 65.325817][ T5202] bridge0: port 1(syz_tun) entered disabled state [ 65.351491][ T5212] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 65.560328][ T5234] netlink: 'syz.3.617': attribute type 8 has an invalid length. [ 65.566131][ T5235] netlink: 'syz.0.616': attribute type 9 has an invalid length. [ 65.575825][ T5235] __nla_validate_parse: 29 callbacks suppressed [ 65.575838][ T5235] netlink: 108 bytes leftover after parsing attributes in process `syz.0.616'. [ 65.591173][ T5235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'. [ 65.606889][ T5237] FAULT_INJECTION: forcing a failure. [ 65.606889][ T5237] name failslab, interval 1, probability 0, space 0, times 0 [ 65.619675][ T5237] CPU: 1 UID: 0 PID: 5237 Comm: syz.3.618 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 65.619801][ T5237] Tainted: [W]=WARN [ 65.619807][ T5237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.619819][ T5237] Call Trace: [ 65.619864][ T5237] [ 65.619870][ T5237] __dump_stack+0x1d/0x30 [ 65.619888][ T5237] dump_stack_lvl+0xe8/0x140 [ 65.619905][ T5237] dump_stack+0x15/0x1b [ 65.619919][ T5237] should_fail_ex+0x265/0x280 [ 65.620041][ T5237] should_failslab+0x8c/0xb0 [ 65.620071][ T5237] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 65.620159][ T5237] ? sock_alloc_inode+0x34/0xa0 [ 65.620182][ T5237] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.620202][ T5237] sock_alloc_inode+0x34/0xa0 [ 65.620240][ T5237] alloc_inode+0x40/0x170 [ 65.620265][ T5237] __sock_create+0x122/0x5b0 [ 65.620366][ T5237] __sys_socket+0xb0/0x180 [ 65.620393][ T5237] __x64_sys_socket+0x3f/0x50 [ 65.620416][ T5237] x64_sys_call+0x285a/0x2fb0 [ 65.620437][ T5237] do_syscall_64+0xd2/0x200 [ 65.620516][ T5237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.620540][ T5237] ? clear_bhb_loop+0x40/0x90 [ 65.620616][ T5237] ? clear_bhb_loop+0x40/0x90 [ 65.620638][ T5237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.620659][ T5237] RIP: 0033:0x7f61f3d30847 [ 65.620674][ T5237] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.620691][ T5237] RSP: 002b:00007f61f2395fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 65.620754][ T5237] RAX: ffffffffffffffda RBX: 00007f61f3f55fa0 RCX: 00007f61f3d30847 [ 65.620765][ T5237] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 65.620775][ T5237] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 65.620785][ T5237] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000001 [ 65.620795][ T5237] R13: 0000000000000000 R14: 00007f61f3f55fa0 R15: 00007fff46b0b4e8 [ 65.620810][ T5237] [ 65.821222][ T5237] socket: no more sockets [ 65.907898][ T5250] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 65.924859][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 65.933805][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 65.945409][ T5252] FAULT_INJECTION: forcing a failure. [ 65.945409][ T5252] name failslab, interval 1, probability 0, space 0, times 0 [ 65.958216][ T5252] CPU: 0 UID: 0 PID: 5252 Comm: syz.1.625 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 65.958292][ T5252] Tainted: [W]=WARN [ 65.958297][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.958307][ T5252] Call Trace: [ 65.958390][ T5252] [ 65.958397][ T5252] __dump_stack+0x1d/0x30 [ 65.958418][ T5252] dump_stack_lvl+0xe8/0x140 [ 65.958436][ T5252] dump_stack+0x15/0x1b [ 65.958451][ T5252] should_fail_ex+0x265/0x280 [ 65.958569][ T5252] should_failslab+0x8c/0xb0 [ 65.958587][ T5252] __kvmalloc_node_noprof+0x123/0x4e0 [ 65.958613][ T5252] ? alloc_netdev_mqs+0xa1/0xab0 [ 65.958642][ T5252] ? vsnprintf+0x829/0x890 [ 65.958667][ T5252] alloc_netdev_mqs+0xa1/0xab0 [ 65.958706][ T5252] ? __pfx_wg_setup+0x10/0x10 [ 65.958797][ T5252] rtnl_create_link+0x239/0x710 [ 65.958833][ T5252] rtnl_newlink_create+0x14c/0x620 [ 65.958853][ T5252] ? __schedule+0x6a8/0xb30 [ 65.958875][ T5252] rtnl_newlink+0xf29/0x12d0 [ 65.958943][ T5252] ? strncpy_from_kernel_nofault+0x78/0x130 [ 65.958970][ T5252] ? search_extable+0x53/0x80 [ 65.959041][ T5252] ? strncpy_from_kernel_nofault+0x78/0x130 [ 65.959068][ T5252] ? strncpy_from_kernel_nofault+0x78/0x130 [ 65.959196][ T5252] ? fixup_exception+0x72e/0xd00 [ 65.959216][ T5252] ? __kfree_skb+0x109/0x150 [ 65.959240][ T5252] ? __rcu_read_unlock+0x4f/0x70 [ 65.959257][ T5252] ? avc_has_perm_noaudit+0x1b1/0x200 [ 65.959283][ T5252] ? selinux_capable+0x1f9/0x270 [ 65.959366][ T5252] ? security_capable+0x83/0x90 [ 65.959391][ T5252] ? ns_capable+0x7d/0xb0 [ 65.959410][ T5252] ? __pfx_rtnl_newlink+0x10/0x10 [ 65.959458][ T5252] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 65.959489][ T5252] netlink_rcv_skb+0x120/0x220 [ 65.959543][ T5252] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.959636][ T5252] rtnetlink_rcv+0x1c/0x30 [ 65.959710][ T5252] netlink_unicast+0x59e/0x670 [ 65.959737][ T5252] netlink_sendmsg+0x58b/0x6b0 [ 65.959764][ T5252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.959824][ T5252] __sock_sendmsg+0x142/0x180 [ 65.959856][ T5252] ____sys_sendmsg+0x31e/0x4e0 [ 65.959923][ T5252] ___sys_sendmsg+0x17b/0x1d0 [ 65.959964][ T5252] __x64_sys_sendmsg+0xd4/0x160 [ 65.959992][ T5252] x64_sys_call+0x2999/0x2fb0 [ 65.960054][ T5252] do_syscall_64+0xd2/0x200 [ 65.960088][ T5252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.960110][ T5252] ? clear_bhb_loop+0x40/0x90 [ 65.960178][ T5252] ? clear_bhb_loop+0x40/0x90 [ 65.960235][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.960252][ T5252] RIP: 0033:0x7f03daffe929 [ 65.960268][ T5252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.960283][ T5252] RSP: 002b:00007f03d9667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.960450][ T5252] RAX: ffffffffffffffda RBX: 00007f03db225fa0 RCX: 00007f03daffe929 [ 65.960461][ T5252] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 65.960472][ T5252] RBP: 00007f03d9667090 R08: 0000000000000000 R09: 0000000000000000 [ 65.960485][ T5252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.960497][ T5252] R13: 0000000000000000 R14: 00007f03db225fa0 R15: 00007ffc69055ea8 [ 65.960515][ T5252] [ 66.352781][ T5266] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 66.552032][ T5286] bridge0: port 1(syz_tun) entered blocking state [ 66.558572][ T5286] bridge0: port 1(syz_tun) entered disabled state [ 66.567556][ T5288] netlink: 332 bytes leftover after parsing attributes in process `syz.0.636'. [ 66.576867][ T5288] netlink: 'syz.0.636': attribute type 9 has an invalid length. [ 66.584583][ T5288] netlink: 108 bytes leftover after parsing attributes in process `syz.0.636'. [ 66.593632][ T5288] netlink: 32 bytes leftover after parsing attributes in process `syz.0.636'. [ 66.602890][ T5286] syz_tun: entered allmulticast mode [ 66.608878][ T5286] syz_tun: entered promiscuous mode [ 66.616761][ T5292] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 66.625529][ T5286] bridge0: port 1(syz_tun) entered blocking state [ 66.632031][ T5286] bridge0: port 1(syz_tun) entered forwarding state [ 66.645093][ T5291] syz_tun: left allmulticast mode [ 66.650179][ T5291] syz_tun: left promiscuous mode [ 66.655332][ T5291] bridge0: port 1(syz_tun) entered disabled state [ 66.754857][ T5308] FAULT_INJECTION: forcing a failure. [ 66.754857][ T5308] name failslab, interval 1, probability 0, space 0, times 0 [ 66.760463][ T5290] bridge0: port 1(syz_tun) entered blocking state [ 66.767536][ T5308] CPU: 1 UID: 0 PID: 5308 Comm: syz.3.647 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 66.767572][ T5308] Tainted: [W]=WARN [ 66.767578][ T5308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.767590][ T5308] Call Trace: [ 66.767597][ T5308] [ 66.767676][ T5308] __dump_stack+0x1d/0x30 [ 66.767710][ T5308] dump_stack_lvl+0xe8/0x140 [ 66.767764][ T5308] dump_stack+0x15/0x1b [ 66.767780][ T5308] should_fail_ex+0x265/0x280 [ 66.767807][ T5308] should_failslab+0x8c/0xb0 [ 66.767829][ T5308] __kmalloc_noprof+0xa5/0x3e0 [ 66.767852][ T5308] ? ___neigh_create+0x4c9/0x1290 [ 66.767914][ T5308] ___neigh_create+0x4c9/0x1290 [ 66.767949][ T5308] ? ipt_do_table+0x9fb/0xab0 [ 66.767976][ T5308] ? netlbl_enabled+0x25/0x40 [ 66.768000][ T5308] ? selinux_ip_postroute+0x1b7/0xb50 [ 66.768025][ T5308] __neigh_create+0x54/0x70 [ 66.768043][ T5308] ip_neigh_gw4+0x12e/0x170 [ 66.768143][ T5308] ip_finish_output2+0x857/0x8b0 [ 66.768166][ T5308] ? __rcu_read_unlock+0x4f/0x70 [ 66.768189][ T5308] ip_finish_output+0x112/0x290 [ 66.768210][ T5308] ip_mc_output+0x25d/0x340 [ 66.768264][ T5308] ? __pfx_ip_finish_output+0x10/0x10 [ 66.768285][ T5308] ? __pfx_ip_mc_output+0x10/0x10 [ 66.768304][ T5308] ip_send_skb+0x139/0x140 [ 66.768326][ T5308] udp_send_skb+0x6e3/0xa40 [ 66.768404][ T5308] udp_sendmsg+0x1050/0x13b0 [ 66.768473][ T5308] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 66.768505][ T5308] ? __pfx_udp_sendmsg+0x10/0x10 [ 66.768524][ T5308] inet_sendmsg+0xac/0xd0 [ 66.768553][ T5308] __sock_sendmsg+0x102/0x180 [ 66.768649][ T5308] ____sys_sendmsg+0x345/0x4e0 [ 66.768766][ T5308] ___sys_sendmsg+0x17b/0x1d0 [ 66.768808][ T5308] __sys_sendmmsg+0x178/0x300 [ 66.768848][ T5308] __x64_sys_sendmmsg+0x57/0x70 [ 66.768878][ T5308] x64_sys_call+0x2f2f/0x2fb0 [ 66.769007][ T5308] do_syscall_64+0xd2/0x200 [ 66.769072][ T5308] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.769097][ T5308] ? clear_bhb_loop+0x40/0x90 [ 66.769116][ T5308] ? clear_bhb_loop+0x40/0x90 [ 66.769137][ T5308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.769176][ T5308] RIP: 0033:0x7f61f3d2e929 [ 66.769191][ T5308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.769265][ T5308] RSP: 002b:00007f61f2397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 66.769283][ T5308] RAX: ffffffffffffffda RBX: 00007f61f3f55fa0 RCX: 00007f61f3d2e929 [ 66.769296][ T5308] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 66.769308][ T5308] RBP: 00007f61f2397090 R08: 0000000000000000 R09: 0000000000000000 [ 66.769367][ T5308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.769432][ T5308] R13: 0000000000000000 R14: 00007f61f3f55fa0 R15: 00007fff46b0b4e8 [ 66.769456][ T5308] [ 67.056710][ T5290] bridge0: port 1(syz_tun) entered disabled state [ 67.063467][ T5290] syz_tun: entered allmulticast mode [ 67.072244][ T5290] syz_tun: entered promiscuous mode [ 67.082367][ T5297] syz_tun: left allmulticast mode [ 67.087556][ T5297] syz_tun: left promiscuous mode [ 67.093227][ T5297] bridge0: port 1(syz_tun) entered disabled state [ 67.289989][ T5331] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20002 [ 67.349478][ T5336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.364102][ T5336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.417222][ T5341] bridge0: port 1(syz_tun) entered blocking state [ 67.423821][ T5341] bridge0: port 1(syz_tun) entered disabled state [ 67.430633][ T5341] syz_tun: entered allmulticast mode [ 67.436444][ T5341] syz_tun: entered promiscuous mode [ 67.454310][ T5341] bridge0: port 1(syz_tun) entered blocking state [ 67.460819][ T5341] bridge0: port 1(syz_tun) entered forwarding state [ 67.474777][ T5341] syz_tun: left allmulticast mode [ 67.479936][ T5341] syz_tun: left promiscuous mode [ 67.485048][ T5341] bridge0: port 1(syz_tun) entered disabled state [ 67.562513][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 67.562527][ T29] audit: type=1326 audit(2000000031.859:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.617833][ T5336] loop2: detected capacity change from 0 to 1764 [ 67.658549][ T5336] loop2: detected capacity change from 0 to 128 [ 67.674653][ T29] audit: type=1326 audit(2000000031.889:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.698197][ T29] audit: type=1326 audit(2000000031.889:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.721592][ T29] audit: type=1326 audit(2000000031.889:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.744983][ T29] audit: type=1326 audit(2000000031.889:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.768343][ T29] audit: type=1326 audit(2000000031.889:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.791692][ T29] audit: type=1326 audit(2000000031.889:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.815274][ T29] audit: type=1326 audit(2000000031.889:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.838694][ T29] audit: type=1326 audit(2000000031.889:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5354 comm="syz.0.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 67.885453][ T5336] bio_check_eod: 50 callbacks suppressed [ 67.885466][ T5336] syz.2.660: attempt to access beyond end of device [ 67.885466][ T5336] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 67.928700][ T5336] syz.2.660: attempt to access beyond end of device [ 67.928700][ T5336] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 67.965154][ T29] audit: type=1326 audit(2000000032.259:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03daffe929 code=0x7ffc0000 [ 67.988970][ T5336] syz.2.660: attempt to access beyond end of device [ 67.988970][ T5336] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 68.002329][ T5336] buffer_io_error: 44 callbacks suppressed [ 68.002340][ T5336] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 68.020196][ T5336] syz.2.660: attempt to access beyond end of device [ 68.020196][ T5336] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 68.033713][ T5336] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 68.054595][ T5336] syz.2.660: attempt to access beyond end of device [ 68.054595][ T5336] loop2: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 68.067968][ T5336] Buffer I/O error on dev loop2, logical block 158, lost async page write [ 68.088946][ T5336] syz.2.660: attempt to access beyond end of device [ 68.088946][ T5336] loop2: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 68.102438][ T5336] Buffer I/O error on dev loop2, logical block 159, lost async page write [ 68.111308][ T5336] syz.2.660: attempt to access beyond end of device [ 68.111308][ T5336] loop2: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 68.124752][ T5336] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 68.147157][ T5336] syz.2.660: attempt to access beyond end of device [ 68.147157][ T5336] loop2: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 68.160565][ T5336] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 68.180697][ T5336] syz.2.660: attempt to access beyond end of device [ 68.180697][ T5336] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 68.194132][ T5336] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 68.202838][ T5336] syz.2.660: attempt to access beyond end of device [ 68.202838][ T5336] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 68.216171][ T5336] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 68.224812][ T5336] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 68.233852][ T5336] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 68.341749][ T5384] syz_tun: left allmulticast mode [ 68.346832][ T5384] syz_tun: left promiscuous mode [ 68.351958][ T5384] bridge0: port 3(syz_tun) entered disabled state [ 68.385270][ T5384] bridge_slave_0: left promiscuous mode [ 68.391003][ T5384] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.407434][ T5384] bridge_slave_1: left allmulticast mode [ 68.413167][ T5384] bridge_slave_1: left promiscuous mode [ 68.419067][ T5384] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.487839][ T5394] loop4: detected capacity change from 0 to 512 [ 68.499021][ T5394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.574292][ T5384] bond0: (slave bond_slave_0): Releasing backup interface [ 68.609206][ T5384] bond0: (slave bond_slave_1): Releasing backup interface [ 68.644998][ T5394] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.679: casefold flag without casefold feature [ 68.658246][ T5394] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.679: couldn't read orphan inode 15 (err -117) [ 68.671226][ T5394] EXT4-fs mount: 8 callbacks suppressed [ 68.671253][ T5394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.708637][ T5384] team0: Port device team_slave_0 removed [ 68.736625][ T5384] team0: Port device team_slave_1 removed [ 68.758644][ T5384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.766277][ T5384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.823835][ T5384] batman_adv: batadv0: Interface deactivated: gretap1 [ 68.830673][ T5384] batman_adv: batadv0: Removing interface: gretap1 [ 68.909011][ T5406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.020012][ T5424] validate_nla: 1 callbacks suppressed [ 69.020027][ T5424] netlink: 'syz.1.695': attribute type 8 has an invalid length. [ 69.084195][ T5427] bridge0: port 1(syz_tun) entered blocking state [ 69.090861][ T5427] bridge0: port 1(syz_tun) entered disabled state [ 69.103578][ T5427] syz_tun: entered allmulticast mode [ 69.113208][ T5427] syz_tun: entered promiscuous mode [ 69.120734][ T5427] bridge0: port 1(syz_tun) entered blocking state [ 69.127225][ T5427] bridge0: port 1(syz_tun) entered forwarding state [ 69.161031][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.186404][ T5427] syz_tun: left allmulticast mode [ 69.191567][ T5427] syz_tun: left promiscuous mode [ 69.196802][ T5427] bridge0: port 1(syz_tun) entered disabled state [ 69.391465][ T5468] netlink: 'syz.1.716': attribute type 8 has an invalid length. [ 69.592460][ T5492] syzkaller0: entered promiscuous mode [ 69.597965][ T5492] syzkaller0: entered allmulticast mode [ 69.605569][ T5501] loop3: detected capacity change from 0 to 256 [ 69.637063][ T5506] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 69.637337][ T5501] FAT-fs (loop3): Directory bread(block 64) failed [ 69.660455][ T5501] FAT-fs (loop3): Directory bread(block 65) failed [ 69.668382][ T5501] FAT-fs (loop3): Directory bread(block 66) failed [ 69.676056][ T5501] FAT-fs (loop3): Directory bread(block 67) failed [ 69.682798][ T5501] FAT-fs (loop3): Directory bread(block 68) failed [ 69.698660][ T5501] FAT-fs (loop3): Directory bread(block 69) failed [ 69.706084][ T5501] FAT-fs (loop3): Directory bread(block 70) failed [ 69.713067][ T5501] FAT-fs (loop3): Directory bread(block 71) failed [ 69.720817][ T5501] FAT-fs (loop3): Directory bread(block 72) failed [ 69.744550][ T5501] FAT-fs (loop3): Directory bread(block 73) failed [ 69.796103][ T5514] loop2: detected capacity change from 0 to 8192 [ 69.832112][ T3291] loop2: p1 p2 [ 69.836480][ T3291] loop2: p1 start 50331648 is beyond EOD, truncated [ 69.857440][ T5514] loop2: p1 p2 [ 69.861972][ T5514] loop2: p1 start 50331648 is beyond EOD, truncated [ 69.980484][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 70.005798][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 70.036614][ T5544] FAULT_INJECTION: forcing a failure. [ 70.036614][ T5544] name failslab, interval 1, probability 0, space 0, times 0 [ 70.049344][ T5544] CPU: 0 UID: 0 PID: 5544 Comm: syz.2.751 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 70.049415][ T5544] Tainted: [W]=WARN [ 70.049422][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.049432][ T5544] Call Trace: [ 70.049437][ T5544] [ 70.049495][ T5544] __dump_stack+0x1d/0x30 [ 70.049515][ T5544] dump_stack_lvl+0xe8/0x140 [ 70.049535][ T5544] dump_stack+0x15/0x1b [ 70.049553][ T5544] should_fail_ex+0x265/0x280 [ 70.049582][ T5544] should_failslab+0x8c/0xb0 [ 70.049651][ T5544] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 70.049692][ T5544] ? v9fs_session_init+0x78/0xde0 [ 70.049717][ T5544] kstrdup+0x3e/0xd0 [ 70.049736][ T5544] v9fs_session_init+0x78/0xde0 [ 70.049818][ T5544] ? obj_cgroup_charge_account+0x122/0x1a0 [ 70.049846][ T5544] ? __rcu_read_unlock+0x4f/0x70 [ 70.049864][ T5544] ? should_fail_ex+0xdb/0x280 [ 70.049886][ T5544] ? v9fs_mount+0x51/0x590 [ 70.049919][ T5544] ? should_failslab+0x8c/0xb0 [ 70.049938][ T5544] ? __kmalloc_cache_noprof+0x189/0x320 [ 70.050021][ T5544] v9fs_mount+0x67/0x590 [ 70.050043][ T5544] ? __pfx_v9fs_mount+0x10/0x10 [ 70.050076][ T5544] legacy_get_tree+0x78/0xd0 [ 70.050105][ T5544] vfs_get_tree+0x54/0x1d0 [ 70.050135][ T5544] do_new_mount+0x207/0x680 [ 70.050166][ T5544] path_mount+0x4a4/0xb20 [ 70.050198][ T5544] ? user_path_at+0x109/0x130 [ 70.050243][ T5544] __se_sys_mount+0x28f/0x2e0 [ 70.050321][ T5544] ? fput+0x8f/0xc0 [ 70.050350][ T5544] __x64_sys_mount+0x67/0x80 [ 70.050383][ T5544] x64_sys_call+0xd36/0x2fb0 [ 70.050435][ T5544] do_syscall_64+0xd2/0x200 [ 70.050511][ T5544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.050533][ T5544] ? clear_bhb_loop+0x40/0x90 [ 70.050639][ T5544] ? clear_bhb_loop+0x40/0x90 [ 70.050658][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.050677][ T5544] RIP: 0033:0x7fb5b191e929 [ 70.050692][ T5544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.050706][ T5544] RSP: 002b:00007fb5aff87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.050722][ T5544] RAX: ffffffffffffffda RBX: 00007fb5b1b45fa0 RCX: 00007fb5b191e929 [ 70.050790][ T5544] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 70.050803][ T5544] RBP: 00007fb5aff87090 R08: 0000200000000580 R09: 0000000000000000 [ 70.050816][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 70.050828][ T5544] R13: 0000000000000000 R14: 00007fb5b1b45fa0 R15: 00007ffda3d33d78 [ 70.050915][ T5544] [ 70.437720][ T5559] loop1: detected capacity change from 0 to 256 [ 70.451750][ T5553] syzkaller0: entered promiscuous mode [ 70.457307][ T5553] syzkaller0: entered allmulticast mode [ 70.479282][ T5563] batman_adv: batadv0: Adding interface: gretap1 [ 70.485679][ T5563] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.512534][ T5563] batman_adv: batadv0: Interface activated: gretap1 [ 70.524615][ T5559] FAT-fs (loop1): Directory bread(block 64) failed [ 70.537372][ T5559] FAT-fs (loop1): Directory bread(block 65) failed [ 70.549222][ T5559] FAT-fs (loop1): Directory bread(block 66) failed [ 70.556744][ T5559] FAT-fs (loop1): Directory bread(block 67) failed [ 70.564016][ T5559] FAT-fs (loop1): Directory bread(block 68) failed [ 70.572836][ T5559] FAT-fs (loop1): Directory bread(block 69) failed [ 70.582478][ T5559] FAT-fs (loop1): Directory bread(block 70) failed [ 70.589076][ T5559] FAT-fs (loop1): Directory bread(block 71) failed [ 70.614189][ T5559] FAT-fs (loop1): Directory bread(block 72) failed [ 70.629361][ T5559] FAT-fs (loop1): Directory bread(block 73) failed [ 70.658702][ T5572] loop4: detected capacity change from 0 to 1024 [ 70.682579][ T5572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.772946][ T5582] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 70.806171][ T5584] loop3: detected capacity change from 0 to 512 [ 70.813292][ T5584] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 70.828142][ T5584] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.765: casefold flag without casefold feature [ 70.841146][ T5584] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.765: couldn't read orphan inode 15 (err -117) [ 70.871175][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.881576][ T5591] 9pnet_fd: Insufficient options for proto=fd [ 70.887913][ T5584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.912673][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.935890][ T5593] __nla_validate_parse: 4 callbacks suppressed [ 70.935972][ T5593] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 71.002058][ T5601] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 71.014045][ T5597] FAULT_INJECTION: forcing a failure. [ 71.014045][ T5597] name failslab, interval 1, probability 0, space 0, times 0 [ 71.026744][ T5597] CPU: 1 UID: 0 PID: 5597 Comm: syz.3.770 Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 71.026812][ T5597] Tainted: [W]=WARN [ 71.026818][ T5597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.026830][ T5597] Call Trace: [ 71.026835][ T5597] [ 71.026840][ T5597] __dump_stack+0x1d/0x30 [ 71.026937][ T5597] dump_stack_lvl+0xe8/0x140 [ 71.026953][ T5597] dump_stack+0x15/0x1b [ 71.026995][ T5597] should_fail_ex+0x265/0x280 [ 71.027071][ T5597] should_failslab+0x8c/0xb0 [ 71.027091][ T5597] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 71.027113][ T5597] ? __d_alloc+0x3d/0x350 [ 71.027132][ T5597] __d_alloc+0x3d/0x350 [ 71.027176][ T5597] ? mpol_shared_policy_init+0xbd/0x4c0 [ 71.027201][ T5597] d_alloc_pseudo+0x1e/0x80 [ 71.027220][ T5597] alloc_file_pseudo+0x71/0x160 [ 71.027247][ T5597] __shmem_file_setup+0x1de/0x210 [ 71.027336][ T5597] shmem_file_setup+0x3b/0x50 [ 71.027358][ T5597] __se_sys_memfd_create+0x2c3/0x590 [ 71.027382][ T5597] __x64_sys_memfd_create+0x31/0x40 [ 71.027426][ T5597] x64_sys_call+0x122f/0x2fb0 [ 71.027448][ T5597] do_syscall_64+0xd2/0x200 [ 71.027475][ T5597] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.027544][ T5597] ? clear_bhb_loop+0x40/0x90 [ 71.027564][ T5597] ? clear_bhb_loop+0x40/0x90 [ 71.027581][ T5597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.027597][ T5597] RIP: 0033:0x7f61f3d2e929 [ 71.027612][ T5597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.027630][ T5597] RSP: 002b:00007f61f2396e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 71.027657][ T5597] RAX: ffffffffffffffda RBX: 000000000000072d RCX: 00007f61f3d2e929 [ 71.027670][ T5597] RDX: 00007f61f2396ef0 RSI: 0000000000000000 RDI: 00007f61f3db14cc [ 71.027684][ T5597] RBP: 00002000000014c0 R08: 00007f61f2396bb7 R09: 00007f61f2396e40 [ 71.027697][ T5597] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 71.027709][ T5597] R13: 00007f61f2396ef0 R14: 00007f61f2396eb0 R15: 0000200000000300 [ 71.027725][ T5597] [ 71.356023][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.777'. [ 71.477206][ T5627] netlink: 332 bytes leftover after parsing attributes in process `syz.2.781'. [ 71.490561][ T5627] netlink: 'syz.2.781': attribute type 9 has an invalid length. [ 71.498318][ T5627] netlink: 108 bytes leftover after parsing attributes in process `syz.2.781'. [ 71.507311][ T5627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.781'. [ 71.556151][ T5632] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 71.560208][ T5633] bridge0: port 1(syz_tun) entered blocking state [ 71.571107][ T5633] bridge0: port 1(syz_tun) entered disabled state [ 71.571199][ T5627] hub 1-0:1.0: USB hub found [ 71.582598][ T5633] syz_tun: entered allmulticast mode [ 71.584590][ T5627] hub 1-0:1.0: 8 ports detected [ 71.588475][ T5633] syz_tun: entered promiscuous mode [ 71.599222][ T5633] bridge0: port 1(syz_tun) entered blocking state [ 71.605809][ T5633] bridge0: port 1(syz_tun) entered forwarding state [ 71.622627][ T5619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.780'. [ 71.637657][ T5633] syz_tun: left allmulticast mode [ 71.642774][ T5633] syz_tun: left promiscuous mode [ 71.647912][ T5633] bridge0: port 1(syz_tun) entered disabled state [ 71.680656][ T5633] batman_adv: batadv0: Interface deactivated: gretap1 [ 71.687478][ T5633] batman_adv: batadv0: Removing interface: gretap1 [ 71.802433][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.0.789'. [ 71.888919][ T5655] loop1: detected capacity change from 0 to 512 [ 71.926776][ T5655] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.796: inode #196608: comm syz.1.796: iget: illegal inode # [ 71.946007][ T5655] EXT4-fs (loop1): Remounting filesystem read-only [ 71.952617][ T5655] EXT4-fs (loop1): no journal found [ 71.957873][ T5655] EXT4-fs (loop1): can't get journal size [ 71.987180][ T5661] bridge0: port 1(syz_tun) entered blocking state [ 71.993785][ T5661] bridge0: port 1(syz_tun) entered disabled state [ 72.000951][ T5661] syz_tun: entered allmulticast mode [ 72.001881][ T5655] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.006599][ T5661] syz_tun: entered promiscuous mode [ 72.021254][ T5661] bridge0: port 1(syz_tun) entered blocking state [ 72.026413][ T5655] EXT4-fs (loop1): failed to initialize system zone (-22) [ 72.027705][ T5661] bridge0: port 1(syz_tun) entered forwarding state [ 72.043159][ T5655] EXT4-fs (loop1): mount failed [ 72.053588][ T5661] syz_tun: left allmulticast mode [ 72.058637][ T5661] syz_tun: left promiscuous mode [ 72.063690][ T5661] bridge0: port 1(syz_tun) entered disabled state [ 72.112665][ T5664] loop3: detected capacity change from 0 to 512 [ 72.130140][ T5664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 72.158748][ T5664] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.794: casefold flag without casefold feature [ 72.173646][ T5664] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.794: couldn't read orphan inode 15 (err -117) [ 72.186256][ T5664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.338316][ T5667] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 72.619845][ T5692] netlink: 'syz.4.811': attribute type 8 has an invalid length. [ 72.632881][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 72.632894][ T29] audit: type=1400 audit(2000000036.929:5636): avc: denied { write } for pid=5693 comm="syz.0.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.689937][ T29] audit: type=1326 audit(2000000036.979:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.713349][ T29] audit: type=1326 audit(2000000036.979:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.738386][ T5703] loop4: detected capacity change from 0 to 256 [ 72.785028][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.793709][ T29] audit: type=1326 audit(2000000037.029:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.817385][ T29] audit: type=1326 audit(2000000037.029:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.840842][ T29] audit: type=1326 audit(2000000037.029:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.843969][ T5703] FAT-fs (loop4): Directory bread(block 64) failed [ 72.864158][ T29] audit: type=1326 audit(2000000037.029:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.864231][ T29] audit: type=1326 audit(2000000037.029:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.895578][ T5703] FAT-fs (loop4): Directory bread(block 65) failed [ 72.917359][ T29] audit: type=1326 audit(2000000037.029:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.932735][ T5703] FAT-fs (loop4): Directory bread(block 66) failed [ 72.947143][ T29] audit: type=1326 audit(2000000037.029:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.0.814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d6147e929 code=0x7ffc0000 [ 72.977796][ T5703] FAT-fs (loop4): Directory bread(block 67) failed [ 72.985499][ T5703] FAT-fs (loop4): Directory bread(block 68) failed [ 72.992208][ T5703] FAT-fs (loop4): Directory bread(block 69) failed [ 72.998833][ T5703] FAT-fs (loop4): Directory bread(block 70) failed [ 73.005743][ T5703] FAT-fs (loop4): Directory bread(block 71) failed [ 73.012484][ T5703] FAT-fs (loop4): Directory bread(block 72) failed [ 73.019404][ T5703] FAT-fs (loop4): Directory bread(block 73) failed [ 73.085823][ T5709] loop1: detected capacity change from 0 to 2048 [ 73.106130][ T5709] EXT4-fs (loop1): failed to initialize system zone (-117) [ 73.114909][ T5709] EXT4-fs (loop1): mount failed [ 73.128884][ T3291] ================================================================== [ 73.136994][ T3291] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 73.143766][ T3291] [ 73.146100][ T3291] write to 0xffff8881023d5618 of 8 bytes by task 5709 on cpu 0: [ 73.153732][ T3291] inc_diskseq+0x2d/0x40 [ 73.157985][ T3291] disk_force_media_change+0x9e/0xe0 [ 73.163287][ T3291] lo_release+0x2cb/0x400 [ 73.167623][ T3291] bdev_release+0x370/0x3d0 [ 73.172117][ T3291] blkdev_release+0x15/0x20 [ 73.176613][ T3291] __fput+0x298/0x650 [ 73.180588][ T3291] fput_close_sync+0x6e/0x120 [ 73.185262][ T3291] __x64_sys_close+0x56/0xf0 [ 73.189844][ T3291] x64_sys_call+0x2747/0x2fb0 [ 73.194510][ T3291] do_syscall_64+0xd2/0x200 [ 73.199011][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.204894][ T3291] [ 73.207204][ T3291] read to 0xffff8881023d5618 of 8 bytes by task 3291 on cpu 1: [ 73.214733][ T3291] block_uevent+0x31/0x50 [ 73.219052][ T3291] dev_uevent+0x349/0x3d0 [ 73.223378][ T3291] uevent_show+0x117/0x200 [ 73.227792][ T3291] dev_attr_show+0x3c/0xa0 [ 73.232202][ T3291] sysfs_kf_seq_show+0x1a0/0x280 [ 73.237135][ T3291] kernfs_seq_show+0x7f/0xa0 [ 73.241714][ T3291] seq_read_iter+0x319/0x940 [ 73.246296][ T3291] kernfs_fop_read_iter+0xc4/0x300 [ 73.251396][ T3291] vfs_read+0x5cd/0x6f0 [ 73.255543][ T3291] ksys_read+0xda/0x1a0 [ 73.259703][ T3291] __x64_sys_read+0x40/0x50 [ 73.264274][ T3291] x64_sys_call+0x2d77/0x2fb0 [ 73.268948][ T3291] do_syscall_64+0xd2/0x200 [ 73.273463][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.279364][ T3291] [ 73.281680][ T3291] value changed: 0x00000000000000f9 -> 0x00000000000000fa [ 73.288777][ T3291] [ 73.291091][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 73.297229][ T3291] CPU: 1 UID: 0 PID: 3291 Comm: udevd Tainted: G W 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(voluntary) [ 73.310760][ T3291] Tainted: [W]=WARN [ 73.314548][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.324599][ T3291] ==================================================================